NVD

Id
42879  
Name
CVE-2012-0805  
Description
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-06-05  
Modified Date
2012-06-15  
Seq
2012-0805  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
215737 42879 CVE-2012-0805 RHSA-2012:0369  View
215738 42879 CVE-2012-0805 DSA-2449  View
215739 42879 CVE-2012-0805 http://www.sqlalchemy.org/changelog/CHANGES_0_7_0  View
215740 42879 CVE-2012-0805 http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7/  View
215741 42879 CVE-2012-0805 sqlalchemy-select-sql-injection(73756)  View
215742 42879 CVE-2012-0805 https://bugs.launchpad.net/keystone/+bug/918608  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26914 JVNDB-2012-002621 Keystone で使用される SQLAlchemy における SQL インジェクションの脆弱性 Keystone で使用される SQLAlchemy には、SQL インジェクションの脆弱性が存在します。 CVE-2012-0805 54043 CVE-2012-0805 42879 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002621.html 2012-06-05 2012-06-07 View