| Nom de la faiblesse | Source | |
|---|---|---|
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
| Métriques | Score | Gravité | CVSS Vecteur | Source |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P | nvd@nist.gov |
Date de publication : 2013-09-29 22h00 +00:00
Auteur : Wireghoul
EDB Vérifié : No
Simone_tellini>>Mod_accounting >> Version To (including) 0.5
Apache>>Http_server >> Version 1.3
Apache>>Http_server >> Version 1.3.0
Apache>>Http_server >> Version 1.3.1
Apache>>Http_server >> Version 1.3.1.1
Apache>>Http_server >> Version 1.3.2
Apache>>Http_server >> Version 1.3.3
Apache>>Http_server >> Version 1.3.4
Apache>>Http_server >> Version 1.3.5
Apache>>Http_server >> Version 1.3.6
Apache>>Http_server >> Version 1.3.7
Apache>>Http_server >> Version 1.3.8
Apache>>Http_server >> Version 1.3.9
Apache>>Http_server >> Version 1.3.10
Apache>>Http_server >> Version 1.3.11
Apache>>Http_server >> Version 1.3.12
Apache>>Http_server >> Version 1.3.13
Apache>>Http_server >> Version 1.3.14
Apache>>Http_server >> Version 1.3.15
Apache>>Http_server >> Version 1.3.16
Apache>>Http_server >> Version 1.3.17
Apache>>Http_server >> Version 1.3.18
Apache>>Http_server >> Version 1.3.19
Apache>>Http_server >> Version 1.3.20
Apache>>Http_server >> Version 1.3.22
Apache>>Http_server >> Version 1.3.23
Apache>>Http_server >> Version 1.3.24
Apache>>Http_server >> Version 1.3.25
Apache>>Http_server >> Version 1.3.26
Apache>>Http_server >> Version 1.3.27
Apache>>Http_server >> Version 1.3.28
Apache>>Http_server >> Version 1.3.29
Apache>>Http_server >> Version 1.3.30
Apache>>Http_server >> Version 1.3.31
Apache>>Http_server >> Version 1.3.32
Apache>>Http_server >> Version 1.3.33
Apache>>Http_server >> Version 1.3.34
Apache>>Http_server >> Version 1.3.35
Apache>>Http_server >> Version 1.3.36
Apache>>Http_server >> Version 1.3.37
Apache>>Http_server >> Version 1.3.38
Apache>>Http_server >> Version 1.3.39
Apache>>Http_server >> Version 1.3.41
Apache>>Http_server >> Version 1.3.42
Apache>>Http_server >> Version 1.3.65
Apache>>Http_server >> Version 1.3.68