CVE-2014-7959
15h00 +00:00
CVE の説明
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Improper Neutralization of Special Elements used in an SQL Command The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
メトリクス
| メトリクス | スコア | 深刻度 | CVSS ベクター | 出典 |
|---|---|---|---|---|
| V2 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSSスコア
EPSSパーセンタイル
関連製品
構成 0
Ait-pro>>Bulletproof_security >> Version .44
Ait-pro>>Bulletproof_security >> Version .44.1
Ait-pro>>Bulletproof_security >> Version .45
Ait-pro>>Bulletproof_security >> Version .45.1
Ait-pro>>Bulletproof_security >> Version .45.2
Ait-pro>>Bulletproof_security >> Version .45.3
Ait-pro>>Bulletproof_security >> Version .45.4
Ait-pro>>Bulletproof_security >> Version .45.5
Ait-pro>>Bulletproof_security >> Version .45.6
Ait-pro>>Bulletproof_security >> Version .45.7
Ait-pro>>Bulletproof_security >> Version .45.8
Ait-pro>>Bulletproof_security >> Version .45.9
Ait-pro>>Bulletproof_security >> Version .46
Ait-pro>>Bulletproof_security >> Version .46.1
Ait-pro>>Bulletproof_security >> Version .46.2
Ait-pro>>Bulletproof_security >> Version .46.3
Ait-pro>>Bulletproof_security >> Version .46.4
Ait-pro>>Bulletproof_security >> Version .46.5
Ait-pro>>Bulletproof_security >> Version .46.6
Ait-pro>>Bulletproof_security >> Version .46.7
Ait-pro>>Bulletproof_security >> Version .46.8
Ait-pro>>Bulletproof_security >> Version .46.9
Ait-pro>>Bulletproof_security >> Version .47
Ait-pro>>Bulletproof_security >> Version .47.1
Ait-pro>>Bulletproof_security >> Version .47.2
Ait-pro>>Bulletproof_security >> Version .47.3
Ait-pro>>Bulletproof_security >> Version .47.4
Ait-pro>>Bulletproof_security >> Version .47.5
Ait-pro>>Bulletproof_security >> Version .47.6
Ait-pro>>Bulletproof_security >> Version .47.7
Ait-pro>>Bulletproof_security >> Version .47.8
Ait-pro>>Bulletproof_security >> Version .47.9
Ait-pro>>Bulletproof_security >> Version .48
Ait-pro>>Bulletproof_security >> Version .48.1
Ait-pro>>Bulletproof_security >> Version .48.2
Ait-pro>>Bulletproof_security >> Version .48.3
Ait-pro>>Bulletproof_security >> Version .48.4
Ait-pro>>Bulletproof_security >> Version .48.5
Ait-pro>>Bulletproof_security >> Version .48.6
Ait-pro>>Bulletproof_security >> Version .48.7
Ait-pro>>Bulletproof_security >> Version .48.8
Ait-pro>>Bulletproof_security >> Version .48.9
Ait-pro>>Bulletproof_security >> Version .49
Ait-pro>>Bulletproof_security >> Version .49.1
Ait-pro>>Bulletproof_security >> Version .49.2
Ait-pro>>Bulletproof_security >> Version .49.3
Ait-pro>>Bulletproof_security >> Version .49.4
Ait-pro>>Bulletproof_security >> Version .49.5
Ait-pro>>Bulletproof_security >> Version .49.6
Ait-pro>>Bulletproof_security >> Version .49.7
Ait-pro>>Bulletproof_security >> Version .49.8
Ait-pro>>Bulletproof_security >> Version .49.9
Ait-pro>>Bulletproof_security >> Version .50
Ait-pro>>Bulletproof_security >> Version .50.1
Ait-pro>>Bulletproof_security >> Version .50.2
Ait-pro>>Bulletproof_security >> Version .50.3
Ait-pro>>Bulletproof_security >> Version .50.4
Ait-pro>>Bulletproof_security >> Version .50.5
Ait-pro>>Bulletproof_security >> Version .50.6
Ait-pro>>Bulletproof_security >> Version .50.7
Ait-pro>>Bulletproof_security >> Version .50.8
Ait-pro>>Bulletproof_security >> Version .50.9
Ait-pro>>Bulletproof_security >> Version .51
参考資料
Tags : x_refsource_MISC
Tags : mailing-list, x_refsource_BUGTRAQ
