← back
CVE-2011-4460

CVE-2011-4460

EPSS 1.8%
SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.htmlhttp://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.htmlhttp://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.htmlhttp://osvdb.org/82136http://secunia.com/advisories/49259https://exchange.xforce.ibmcloud.com/vulnerabilities/75824http://www.securityfocus.com/bid/53660