Lucene search
HistoryNov 15, 2012 - 11:58 a.m.
CVE-2012-4951
verifone
vericentre
web console
sql injection
cve-2012-4951
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.5%
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the (1) TerminalId, (2) ModelName, or (3) ApplicationName parameter.
Affected configurations
Node
verifonevericentre_web_consoleRange≤2.2
ORverifonevericentre_web_consoleMatch2.0
ORverifonevericentre_web_consoleMatch2.0.1
Related
nvd
nvd
CVE-2012-4951
2012-11-15 11:58:40
cert
cert
VeriCentre web application SQL injection vulnerability
2012-11-06 00:00:00
cvelist
cvelist
CVE-2012-4951
2012-11-15 11:00:00
prion
prion
Sql injection
2012-11-15 11:58:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.5%
Related for CVE-2012-4951