CVE

Id
64756  
CVE No.
CVE-2013-4809  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter.  
Phase
Assigned (20130712)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
636747 64756 CVE-2013-4809 MISC:http://zerodayinitiative.com/advisories/ZDI-13-227/  View
636748 64756 CVE-2013-4809 HP:HPSBPV02918  View
636749 64756 CVE-2013-4809 URL:http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03897409  View
636750 64756 CVE-2013-4809 HP:SSRT101132  View
636751 64756 CVE-2013-4809 URL:http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03897409  View
636752 64756 CVE-2013-4809 SECTRACK:1029010  View
636753 64756 CVE-2013-4809 URL:http://www.securitytracker.com/id/1029010  View
636754 64756 CVE-2013-4809 SECUNIA:54788  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22683 JVNDB-2013-004258 HP XP P9000 Command View Advanced Edition ソフトウェアにおけるクロスサイトスクリプティングの脆弱性 HP XP P9000 Command View Advanced Edition ソフトウェアには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-4814 64756 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004258.html  View