Lucene search

PRIOn knowledge basePRION:CVE-2011-4460

HistoryJun 04, 2012 - 7:55 p.m.

Sql injection

2012-06-0419:55:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.7%

JSON

SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.

CPENameOperatorVersion
rteq3.8.7
rteq3.5.5
rteq3.0.4
rteq3.2.1 rc1
rteq2.0.7
rteq3.6.0 pre1
rteq3.8.9 rc2
rteq4.0.0 rc4
rteq3.4.0 rc2
rteq3.0.8

Name	Operator	Version
rt	eq	3.8.7
rt	eq	3.5.5
rt	eq	3.0.4
rt	eq	3.2.1 rc1
rt	eq	2.0.7
rt	eq	3.6.0 pre1
rt	eq	3.8.9 rc2
rt	eq	4.0.0 rc4
rt	eq	3.4.0 rc2
rt	eq	3.0.8

Rows per page:

1-10 of 1871

References

lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html

lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html

lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html

osvdb.org/82136

secunia.com/advisories/49259

www.securityfocus.com/bid/53660

exchange.xforce.ibmcloud.com/vulnerabilities/75824