Description (CNA)
SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html
- http://secunia.com/advisories/49259
- http://osvdb.org/82136
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75824
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
- http://www.securityfocus.com/bid/53660
ADP enrichment
No English description supplied.
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html
- http://secunia.com/advisories/49259
- http://osvdb.org/82136
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75824
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
- http://www.securityfocus.com/bid/53660