NVD

Id
16059  
Name
CVE-2010-4824  
Description
SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Translatable extension is enabled, allows remote attackers to execute arbitrary SQL commands via the locale parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2012-09-17  
Modified Date
2012-10-15  
Seq
2010-4824  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90796 16059 CVE-2010-4824 http://doc.silverstripe.org/framework/en/trunk/changelogs//2.3.10  View
90797 16059 CVE-2010-4824 http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4  View
90798 16059 CVE-2010-4824 http://open.silverstripe.org/changeset/114515  View
90799 16059 CVE-2010-4824 http://open.silverstripe.org/changeset/114517  View
90800 16059 CVE-2010-4824 [oss-security] 20110104 CVE request: silverstripe before 2.4.4  View
90801 16059 CVE-2010-4824 [oss-security] 20120430 CVE-request: SilverStripe before 2.4.4  View
90802 16059 CVE-2010-4824 [oss-security] 20120430 Re: CVE-request: SilverStripe before 2.4.4  View
90803 16059 CVE-2010-4824 [oss-security] 20120501 Re: CVE-request: SilverStripe before 2.4.4  View
90804 16059 CVE-2010-4824 45367  View
90805 16059 CVE-2010-4824 silverstripe-locale-sql-injection(63989)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38519 JVNDB-2010-004304 SilverStripe の core/model/Translatable.php における SQL インジェクションの脆弱性 SilverStripe の core/model/Translatable.php の augmentSQL メソッドには、Translatable エクステンションが有効な場合、SQL インジェクションの脆弱性が存在します。 CVE-2010-4824 47404 CVE-2010-4824 16059 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004304.html 2010-12-21 2012-09-20 View