CVE-2011-0467 HIGH

CVE-2011-0467: SQL injection in SUSE studio via select parameter

Vendor Suse

Product SUSE Studio Onsite

Weakness CWE-89 · SQLi

Published June 7, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.

Key dates

02Disclosure timeline

June 7, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2011-0467 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

Identifiers

CVE CVE-2011-0467

CWE CWE-89

CVSS 8.8 / HIGH

Affected versions

Vendor Suse

Product SUSE Studio Onsite

Affected ≥ unspecified and < 1.0.3-0.18.1

Vendor Suse

Product SUSE Studio Onsite 1.1 Appliance

Affected ≥ unspecified and < 1.1.2-0.25.1

CVE-2011-0467: SQL injection in SUSE studio via select parameter

01Description

02Disclosure timeline

03References

04Related CVE