CVE

Id
58891  
CVE No.
CVE-2012-5648  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) app/models/hostext/search.rb or (2) app/models/puppetclass.rb, related to the search mechanism.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
602258 58891 CVE-2012-5648 MLIST:[oss-security] 20121220 Multiple SQL injection vulnerabilities in the puppetclass.rb and search.rb scripts in Foreman 1.0.1  View
602259 58891 CVE-2012-5648 URL:http://seclists.org/oss-sec/2012/q4/499  View
602260 58891 CVE-2012-5648 CONFIRM:https://github.com/theforeman/foreman/commit/387b764b614170f23b3552aca498612e341652db  View
602261 58891 CVE-2012-5648 OSVDB:88618  View
602262 58891 CVE-2012-5648 URL:http://osvdb.org/show/osvdb/88618  View
602263 58891 CVE-2012-5648 OSVDB:88623  View
602264 58891 CVE-2012-5648 URL:http://osvdb.org/show/osvdb/88623  View
602265 58891 CVE-2012-5648 SECUNIA:51557  View
602266 58891 CVE-2012-5648 URL:http://secunia.com/advisories/51557  View
602267 58891 CVE-2012-5648 XF:foreman-multiple-sql-injection(80793)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30151 JVNDB-2012-005858 Drupal のファイルアップロード機能における保護メカニズムを回避される脆弱性 Drupal のファイルアップロード機能には、保護メカニズムを回避され、任意の PHP コードを実行される脆弱性が存在します。 CVE-2012-5653 58891 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005858.html  View