Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonstrated by reading data.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2011-04-22 10:55
Updated : 2024-02-28 11:41
NVD link : CVE-2011-1686
Mitre link : CVE-2011-1686
CVE.ORG link : CVE-2011-1686
JSON object : View
Products Affected
bestpractical
- rt
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')