NVD

Id
38317  
Name
CVE-2013-2226  
Description
Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) filename parameter to front/document.form.php, or (3) table parameter to ajax/comments.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-05-14  
Modified Date
2014-05-15  
Seq
2013-2226  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195939 38317 CVE-2013-2226 http://www.glpi-project.org/spip.php?page=annonce&id_breve=297&lang=en&debut_autres_breves=  View
195940 38317 CVE-2013-2226 60693  View
195941 38317 CVE-2013-2226 http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5146.php  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24882 JVNDB-2013-006457 GLPI における SQL インジェクションの脆弱性 GLPI には、SQL インジェクションの脆弱性が存在します。 CVE-2013-2226 62168 CVE-2013-2226 38317 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006457.html 2013-06-20 2014-05-16 View