CVE-2011-4460

Summary

SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html
• http://secunia.com/advisories/49259
• http://osvdb.org/82136
• http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75824
• http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
• http://www.securityfocus.com/bid/53660

References

• http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html
• http://secunia.com/advisories/49259
• http://osvdb.org/82136
• http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75824
• http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
• http://www.securityfocus.com/bid/53660

• ←Previous
• Next→