NVD

Id
41302  
Name
CVE-2013-6172  
Description
steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings via the _session parameter, which can be leveraged to read arbitrary files, conduct SQL injection attacks, and execute arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-11-05  
Modified Date
2014-03-26  
Seq
2013-6172  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
208884 41302 CVE-2013-6172 openSUSE-SU-2014:0365  View
208885 41302 CVE-2013-6172 http://roundcube.net/news/2013/10/21/security-updates-095-and-087/  View
208886 41302 CVE-2013-6172 http://trac.roundcube.net/ticket/1489382  View
208887 41302 CVE-2013-6172 DSA-2787  View
208888 41302 CVE-2013-6172 http://www.interworx.com/developers/changelog/version-5-0-13-build-574-2014-02-19  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23452 JVNDB-2013-005027 Roundcube Webmail の steps/utils/save_pref.inc における構成の設定を変更される脆弱性 Roundcube Webmail の steps/utils/save_pref.inc には、構成の設定を変更される脆弱性が存在します。 CVE-2013-6172 66114 CVE-2013-6172 41302 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005027.html 2013-10-21 2015-08-07 View