NVD

Id
46210  
Name
CVE-2012-4951  
Description
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the (1) TerminalId, (2) ModelName, or (3) ApplicationName parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-11-15  
Modified Date
2013-03-01  
Seq
2012-4951  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231734 46210 CVE-2012-4951 http://www.clearskies.net/documents/css-advisory-css1211-vericentre.pdf  View
231735 46210 CVE-2012-4951 VU#180091  View
231736 46210 CVE-2012-4951 56409  View
231737 46210 CVE-2012-4951 vericentre-paramedit-sql-injection(79832)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29562 JVNDB-2012-005269 VeriCentre に SQL インジェクションの脆弱性 VeriCentre には、SQL インジェクションの脆弱性が存在します。 CVE-2012-4951 58189 CVE-2012-4951 46210 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005269.html 2012-11-07 2012-11-07 View