NVD

Id
41902  
Name
CVE-2013-7092  
Description
Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) events_col, (2) event_id, (3) reason, (4) events_order, (5) emailstatus_order, or (6) emailstatus_col JSON keys.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-13  
Modified Date
2014-01-17  
Seq
2013-7092  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211559 41902 CVE-2013-7092 http://packetstormsecurity.com/files/124277/McAfee-Email-Gateway-7.6-Command-Execution-SQL-Injection.html  View
211560 41902 CVE-2013-7092 20131203 McAfee Email Gateway multiple vulns  View
211561 41902 CVE-2013-7092 64150  View
211562 41902 CVE-2013-7092 mcafee-gateway-cve20137092-sql-injection(90161)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23954 JVNDB-2013-005529 McAfee Email Gateway の /admin/cgi-bin/rpc/doReport/18 における SQL インジェクションの脆弱性 McAfee Email Gateway の /admin/cgi-bin/rpc/doReport/18 には、SQL インジェクションの脆弱性が存在します。 CVE-2013-7092 67034 CVE-2013-7092 41902 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005529.html 2013-12-03 2013-12-17 View