CVEvulnerability
CVE-2011-4460
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-06-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.
Affected configurations
• bestpractical rt 2.0.0
• bestpractical rt 2.0.1
• bestpractical rt 2.0.2
• bestpractical rt 2.0.3
• bestpractical rt 2.0.4
• bestpractical rt 2.0.5
• bestpractical rt 2.0.5.1
• bestpractical rt 2.0.5.3
• bestpractical rt 2.0.6
• bestpractical rt 2.0.7
• bestpractical rt 2.0.8
• bestpractical rt 2.0.8.2
• bestpractical rt 2.0.9
• bestpractical rt 2.0.11
• bestpractical rt 2.0.12
• bestpractical rt 2.0.13
• bestpractical rt 2.0.14
• bestpractical rt 2.0.15
• bestpractical rt 3.0.0
• bestpractical rt 3.0.1
• bestpractical rt 3.0.2
• bestpractical rt 3.0.3
• bestpractical rt 3.0.4
• bestpractical rt 3.0.5
• bestpractical rt 3.0.6
• bestpractical rt 3.0.7
• bestpractical rt 3.0.7.1
• bestpractical rt 3.0.8
• bestpractical rt 3.0.9
• bestpractical rt 3.0.10
• bestpractical rt 3.0.11
• bestpractical rt 3.0.12
• bestpractical rt 3.1.2
• bestpractical rt 3.1.3
• bestpractical rt 3.1.4
• bestpractical rt 3.1.5
• bestpractical rt 3.1.6
• bestpractical rt 3.1.7
• bestpractical rt 3.1.8
• bestpractical rt 3.1.10
• bestpractical rt 3.1.11
• bestpractical rt 3.1.12
• bestpractical rt 3.1.13
• bestpractical rt 3.1.14
• bestpractical rt 3.1.15
• bestpractical rt 3.1.16
• bestpractical rt 3.1.17
• bestpractical rt 3.2.0
• bestpractical rt 3.2.1
• bestpractical rt 3.2.2
• bestpractical rt 3.2.3
• bestpractical rt 3.4.0
• bestpractical rt 3.4.1
• bestpractical rt 3.4.2
• bestpractical rt 3.4.3
• bestpractical rt 3.4.4
• bestpractical rt 3.4.5
• bestpractical rt 3.4.6
• bestpractical rt 3.4.7
• bestpractical rt 3.5.1
… and 40 more
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html Patch, Vendor Advisory
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html Patch
- http://osvdb.org/82136 osvdb.org
- http://secunia.com/advisories/49259 secunia.com
- http://www.securityfocus.com/bid/53660 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75824 exchange.xforce.ibmcloud.com
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html Patch, Vendor Advisory
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html Patch
- http://osvdb.org/82136 osvdb.org
- http://secunia.com/advisories/49259 secunia.com
- http://www.securityfocus.com/bid/53660 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75824 exchange.xforce.ibmcloud.com