NVD

Id
11395  
Name
CVE-2011-5135  
Description
Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allow remote authenticated users with admin or teacher privileges to execute arbitrary SQL commands via the (1) coursereportuiconfig[name] or (2) coursereportuiconfig[description] parameters to index.php.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-08-30  
Modified Date
2012-09-13  
Seq
2011-5135  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62784 11395 CVE-2011-5135 18224  View
62785 11395 CVE-2011-5135 docebolms-index-sql-injection(71720)  View
62786 11395 CVE-2011-5135 https://twitter.com/claudioerba73/status/143383179162685440  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28306 JVNDB-2012-004013 DoceboLMS の iotask モジュールにおける SQL インジェクションの脆弱性 DoceboLMS の iotask モジュールの lib/lib.iotask.php 内の save_connection 関数には、SQL インジェクションの脆弱性が存在します。 CVE-2011-5135 53042 CVE-2011-5135 11395 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004013.html 2012-08-30 2012-09-03 View