NVD

Id
17100  
Name
CVE-2016-0710  
Description
Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to services/usermanager/users/.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-11  
Modified Date
2016-04-20  
Seq
2016-0710  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
94808 17100 CVE-2016-0710 http://haxx.ml/post/140552592371/remote-code-execution-in-apache-jetspeed-230-and  View
94809 17100 CVE-2016-0710 http://packetstormsecurity.com/files/136489/Apache-Jetspeed-Arbitrary-File-Upload.html  View
94810 17100 CVE-2016-0710 http://www.rapid7.com/db/modules/exploit/multi/http/apache_jetspeed_file_upload  View
94811 17100 CVE-2016-0710 [portals-jetspeed-user] 20160303 [CVE-2016-0710] Apache Jetspeed information disclosure vulnerability  View
94812 17100 CVE-2016-0710 https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0710  View
94813 17100 CVE-2016-0710 39643  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1357 JVNDB-2016-002130 Apache Jetspeed の User Manager サービスにおける SQL インジェクションの脆弱性 Apache Jetspeed の User Manager サービスには、SQL インジェクションの脆弱性が存在します。 CVE-2016-0710 86914 CVE-2016-0710 17100 7.5 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002130.html 2016-03-03 2016-04-21 View