CVE-2011-4959

SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL database using far east character encodings, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12	Vendor Advisory
http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6	Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/04/30/1
http://www.openwall.com/lists/oss-security/2012/04/30/3
https://github.com/silverstripe/sapphire/commit/73cca09	Exploit Patch
https://github.com/silverstripe/sapphire/commit/ca78784	Exploit Patch
https://github.com/silverstripe/silverstripe-cms/commit/b5ea2f6	Exploit Patch
http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12	Vendor Advisory
http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6	Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/04/30/1
http://www.openwall.com/lists/oss-security/2012/04/30/3
https://github.com/silverstripe/sapphire/commit/73cca09	Exploit Patch
https://github.com/silverstripe/sapphire/commit/ca78784	Exploit Patch
https://github.com/silverstripe/silverstripe-cms/commit/b5ea2f6	Exploit Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:silverstripe:silverstripe:2.3.0:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.1:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.2:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.3:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.4:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.5:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.6:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.7:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.8:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.9:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.10:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.3.11:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:silverstripe:silverstripe:2.4.0:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.4.1:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.4.2:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.4.3:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.4.4:::::::*
	cpe:2.3:a:silverstripe:silverstripe:2.4.5:::::::*

History

21 Nov 2024, 01:33

Type	Values Removed	Values Added
References	~~() http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12 - Vendor Advisory~~	() http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12 - Vendor Advisory
References	~~() http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6 - Vendor Advisory~~	() http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6 - Vendor Advisory
References	~~() http://www.openwall.com/lists/oss-security/2012/04/30/1 -~~	() http://www.openwall.com/lists/oss-security/2012/04/30/1 -
References	~~() http://www.openwall.com/lists/oss-security/2012/04/30/3 -~~	() http://www.openwall.com/lists/oss-security/2012/04/30/3 -
References	~~() https://github.com/silverstripe/sapphire/commit/73cca09 - Exploit, Patch~~	() https://github.com/silverstripe/sapphire/commit/73cca09 - Exploit, Patch
References	~~() https://github.com/silverstripe/sapphire/commit/ca78784 - Exploit, Patch~~	() https://github.com/silverstripe/sapphire/commit/ca78784 - Exploit, Patch
References	~~() https://github.com/silverstripe/silverstripe-cms/commit/b5ea2f6 - Exploit, Patch~~	() https://github.com/silverstripe/silverstripe-cms/commit/b5ea2f6 - Exploit, Patch

Information

Published : 2012-09-17 17:55

Updated : 2024-11-21 01:33

NVD link : CVE-2011-4959

Mitre link : CVE-2011-4959

CVE.ORG link : CVE-2011-4959

JSON object : View

Products Affected

silverstripe

silverstripe

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

6.8 /10