NVD

Id
41671  
Name
CVE-2013-6787  
Description
SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypted passwords mode set at installation, allows remote authenticated users to execute arbitrary SQL commands via the "password0" parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-05  
Modified Date
2013-12-27  
Seq
2013-6787  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210746 41671 CVE-2013-6787 20131127 SQL Injection in Chamilo LMS  View
210747 41671 CVE-2013-6787 30012  View
210748 41671 CVE-2013-6787 https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-10-2013-11-06-Moderate-risk-SQL-Injection-in-specific-unrecommended-case  View
210749 41671 CVE-2013-6787 https://www.htbridge.com/advisory/HTB23182  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23788 JVNDB-2013-005363 Chamilo LMS の main/auth/profile.php の check_user_password 関数における SQL インジェクションの脆弱性 Chamilo LMS の main/auth/profile.php の check_user_password 関数には、インストール時に非暗号化パスワードモード設定を使用している場合、SQL インジェクションの脆弱性が存在します。 CVE-2013-6787 66729 CVE-2013-6787 41671 6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005363.html 2013-11-06 2014-01-30 View