NVD

Id
42884  
Name
CVE-2012-0811  
Description
Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt function, when mysql_encrypt is configured, or (2) unspecified vectors that are used in backup files generated by backup.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-01  
Modified Date
2014-10-02  
Seq
2012-0811  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
215766 42884 CVE-2012-0811 http://www.codseq.it/advisories/multiple_vulnerabilities_in_postfixadmin  View
215767 42884 CVE-2012-0811 [oss-security] 20120126 CVE request: PostfixAdmin SQL injections and XSS  View
215768 42884 CVE-2012-0811 [oss-security] 20120127 Re: CVE request: PostfixAdmin SQL injections and XSS  View
215769 42884 CVE-2012-0811 51680  View
215770 42884 CVE-2012-0811 https://svn.code.sf.net/p/postfixadmin/code/branches/postfixadmin-2.3/CHANGELOG.TXT  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30600 JVNDB-2012-006308 Postfix Admin における SQL インジェクションの脆弱性 Postfix Admin (別名 postfixadmin) には、SQL インジェクションの脆弱性が存在します。 CVE-2012-0811 54049 CVE-2012-0811 42884 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006308.html 2012-01-16 2014-10-06 View