Lucene search
HistoryOct 23, 2013 - 4:54 p.m.
CVE-2013-4422
cve
2013
4422
sql injection
quassel irc
postgresql
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.4%
SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message.
Affected configurations
Node
quassel-ircquassel_ircRange≤0.9.0
ORquassel-ircquassel_ircMatch0.1.0
ORquassel-ircquassel_ircMatch0.3.0
ORquassel-ircquassel_ircMatch0.3.0.1
ORquassel-ircquassel_ircMatch0.3.0.2
ORquassel-ircquassel_ircMatch0.3.0.3
ORquassel-ircquassel_ircMatch0.3.1
ORquassel-ircquassel_ircMatch0.4.0
ORquassel-ircquassel_ircMatch0.4.1
ORquassel-ircquassel_ircMatch0.4.2
ORquassel-ircquassel_ircMatch0.4.3
ORquassel-ircquassel_ircMatch0.5.0
ORquassel-ircquassel_ircMatch0.6.1
ORquassel-ircquassel_ircMatch0.6.2
ORquassel-ircquassel_ircMatch0.6.3
ORquassel-ircquassel_ircMatch0.7.0
ORquassel-ircquassel_ircMatch0.7.1
ORquassel-ircquassel_ircMatch0.7.2
ORquassel-ircquassel_ircMatch0.7.3
ORquassel-ircquassel_ircMatch0.7.4
ORquassel-ircquassel_ircMatch0.8.0
postgresqlpostgresqlMatch8.2
ORpostgresqlpostgresqlMatch8.2.1
ORpostgresqlpostgresqlMatch8.2.2
ORpostgresqlpostgresqlMatch8.2.3
ORpostgresqlpostgresqlMatch8.2.4
ORpostgresqlpostgresqlMatch8.2.5
ORpostgresqlpostgresqlMatch8.2.6
ORpostgresqlpostgresqlMatch8.2.7
ORpostgresqlpostgresqlMatch8.2.8
ORpostgresqlpostgresqlMatch8.2.9
ORpostgresqlpostgresqlMatch8.2.10
ORpostgresqlpostgresqlMatch8.2.11
ORpostgresqlpostgresqlMatch8.2.12
ORpostgresqlpostgresqlMatch8.2.13
ORpostgresqlpostgresqlMatch8.2.14
ORpostgresqlpostgresqlMatch8.2.15
ORpostgresqlpostgresqlMatch8.2.16
ORpostgresqlpostgresqlMatch8.2.17
ORpostgresqlpostgresqlMatch8.2.18
ORpostgresqlpostgresqlMatch8.3
ORpostgresqlpostgresqlMatch8.3.1
ORpostgresqlpostgresqlMatch8.3.2
ORpostgresqlpostgresqlMatch8.3.3
ORpostgresqlpostgresqlMatch8.3.4
ORpostgresqlpostgresqlMatch8.3.5
ORpostgresqlpostgresqlMatch8.3.6
ORpostgresqlpostgresqlMatch8.3.7
ORpostgresqlpostgresqlMatch8.3.8
ORpostgresqlpostgresqlMatch8.3.9
ORpostgresqlpostgresqlMatch8.3.10
ORpostgresqlpostgresqlMatch8.3.11
ORpostgresqlpostgresqlMatch8.3.12
ORpostgresqlpostgresqlMatch8.3.13
ORpostgresqlpostgresqlMatch8.3.14
ORpostgresqlpostgresqlMatch8.3.15
ORpostgresqlpostgresqlMatch8.3.16
ORpostgresqlpostgresqlMatch8.3.17
ORpostgresqlpostgresqlMatch8.3.18
ORpostgresqlpostgresqlMatch8.3.19
ORpostgresqlpostgresqlMatch8.3.20
ORpostgresqlpostgresqlMatch8.3.21
ORpostgresqlpostgresqlMatch8.3.22
ORpostgresqlpostgresqlMatch8.4
ORpostgresqlpostgresqlMatch8.4.1
ORpostgresqlpostgresqlMatch8.4.2
ORpostgresqlpostgresqlMatch8.4.3
ORpostgresqlpostgresqlMatch8.4.4
ORpostgresqlpostgresqlMatch8.4.5
ORpostgresqlpostgresqlMatch8.4.6
ORpostgresqlpostgresqlMatch8.4.7
ORpostgresqlpostgresqlMatch8.4.8
ORpostgresqlpostgresqlMatch8.4.9
ORpostgresqlpostgresqlMatch8.4.10
ORpostgresqlpostgresqlMatch8.4.11
ORpostgresqlpostgresqlMatch8.4.12
ORpostgresqlpostgresqlMatch8.4.13
ORpostgresqlpostgresqlMatch8.4.14
ORpostgresqlpostgresqlMatch8.4.15
ORpostgresqlpostgresqlMatch8.4.16
ORpostgresqlpostgresqlMatch9.0
ORpostgresqlpostgresqlMatch9.0.1
ORpostgresqlpostgresqlMatch9.0.2
ORpostgresqlpostgresqlMatch9.0.3
ORpostgresqlpostgresqlMatch9.0.4
ORpostgresqlpostgresqlMatch9.0.5
ORpostgresqlpostgresqlMatch9.0.6
ORpostgresqlpostgresqlMatch9.0.7
ORpostgresqlpostgresqlMatch9.0.8
ORpostgresqlpostgresqlMatch9.0.9
ORpostgresqlpostgresqlMatch9.0.10
ORpostgresqlpostgresqlMatch9.0.11
ORpostgresqlpostgresqlMatch9.0.12
ORpostgresqlpostgresqlMatch9.1
ORpostgresqlpostgresqlMatch9.1.1
ORpostgresqlpostgresqlMatch9.1.2
ORpostgresqlpostgresqlMatch9.1.3
ORpostgresqlpostgresqlMatch9.1.4
ORpostgresqlpostgresqlMatch9.1.5
ORpostgresqlpostgresqlMatch9.1.6
ORpostgresqlpostgresqlMatch9.1.7
ORpostgresqlpostgresqlMatch9.1.8
ORpostgresqlpostgresqlMatch9.2
ORpostgresqlpostgresqlMatch9.2.1
ORpostgresqlpostgresqlMatch9.2.2
ORpostgresqlpostgresqlMatch9.2.3
Node
quassel-ircquassel_ircRange≤0.9.0
ORquassel-ircquassel_ircMatch0.1.0
ORquassel-ircquassel_ircMatch0.3.0
ORquassel-ircquassel_ircMatch0.3.0.1
ORquassel-ircquassel_ircMatch0.3.0.2
ORquassel-ircquassel_ircMatch0.3.0.3
ORquassel-ircquassel_ircMatch0.3.1
ORquassel-ircquassel_ircMatch0.4.0
ORquassel-ircquassel_ircMatch0.4.1
ORquassel-ircquassel_ircMatch0.4.2
ORquassel-ircquassel_ircMatch0.4.3
ORquassel-ircquassel_ircMatch0.5.0
ORquassel-ircquassel_ircMatch0.6.1
ORquassel-ircquassel_ircMatch0.6.2
ORquassel-ircquassel_ircMatch0.6.3
ORquassel-ircquassel_ircMatch0.7.0
ORquassel-ircquassel_ircMatch0.7.1
ORquassel-ircquassel_ircMatch0.7.2
ORquassel-ircquassel_ircMatch0.7.3
ORquassel-ircquassel_ircMatch0.7.4
ORquassel-ircquassel_ircMatch0.8.0
qtqtMatch4.8.5
ORqtqtMatch5.0.0
ORqtqtMatch5.0.1
Related
openvas
openvas
Fedora Update for quassel FEDORA-2014-1734
2014-03-04 00:00:00
Mageia: Security Advisory (MGASA-2013-0311)
2022-01-28 00:00:00
Fedora Update for quassel FEDORA-2014-1734
2014-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: quassel-0.9.2-1.fc19
2014-02-26 14:03:33
[SECURITY] Fedora 20 Update: quassel-0.9.2-1.fc20
2014-02-26 13:46:09
ubuntucve
ubuntucve
CVE-2013-4422
2013-10-23 00:00:00
CVE-2015-3427
2015-05-14 00:00:00
prion
prion
Sql injection
2013-10-23 16:54:00
Sql injection
2015-05-14 14:59:00
nessus
nessus
Fedora 19 : quassel-0.9.2-1.fc19 (2014-1734)
2014-02-27 00:00:00
Fedora 20 : quassel-0.9.2-1.fc20 (2014-1742)
2014-02-27 00:00:00
mageia
mageia
Updated quassel packages fix CVE-2013-4422
2013-10-17 23:49:10
freebsd
freebsd
Quassel IRC -- SQL injection vulnerability
2013-10-07 00:00:00
Quassel IRC -- SQL injection vulnerability
2015-04-23 00:00:00
osv
osv
quassel - security update
2015-05-12 00:00:00
nvd
nvd
CVE-2013-4422
2013-10-23 16:54:28
CVE-2015-3427
2015-05-14 14:59:11
debiancve
debiancve
CVE-2013-4422
2013-10-23 16:54:28
CVE-2015-3427
2015-05-14 14:59:11
cvelist
cvelist
CVE-2013-4422
2013-10-23 15:00:00
CVE-2015-3427
2015-05-14 14:00:00
gentoo
gentoo
Quassel: Multiple Vulnerabilities
2013-11-07 00:00:00
debian
debian
[SECURITY] [DSA 3258-1] quassel security update
2015-05-12 19:40:49
securityvulns
securityvulns
quassel SQL injection
2015-05-12 00:00:00
[SECURITY] [DSA 3258-1] quassel security update
2015-05-12 00:00:00
cve
cve
CVE-2015-3427
2015-05-14 14:59:11
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.4%
Related for CVE-2013-4422