admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-28 17:21:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2009/CVE-2009-40xx/CVE-2009-4037.json
René Helmke 7791f18b51 bootstrap
2023-05-16 16:09:41 +02:00

204 lines
7.4 KiB
JSON
Raw Blame History

{
"id": "CVE-2009-4037",
"sourceIdentifier": "cve@mitre.org",
"published": "2009-11-20T19:30:00.877",
"lastModified": "2009-11-23T05:00:00.000",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/db/users_db.inc, and various other .inc and .php files under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, and (7) purchasing/."
},
{
"lang": "es",
"value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en FrontAccounting (FA) antes de v2.1.7 y v2.2.x antes de 2.2 RC permiten a atacantes remotos ejecutar comandos SQL a trav\u00e9s de par\u00e1metros no especificados a 1) admin/db/users_db.inc, y varios otros ficheros .inc y .php bajo (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/ y (7) purchasing/."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.1.6",
"matchCriteriaId": "4D960EE9-9570-4AD6-9E59-D3A86DCA53D7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C37539D1-729E-498A-825E-B1B0D0AF6D75"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1660E02B-2461-4E9F-A4AF-03314FBA102F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "01BF1047-33D4-4CC8-BF62-9F68DA2315EA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "EEBE05A1-22D7-43F0-B19E-BDE611B9A4D2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "86191646-E5C1-40A6-A41E-95057E182AA3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "FD6DFBA1-53A4-4E58-A7BB-659F883BB3F6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "03848CEE-215A-46A4-8083-F1D749D7BDA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "B9542D25-071D-4706-8846-AB7F0D0868B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FCC0D9A7-3FC4-4E00-8E02-5B0D0947A4BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:beta:*:*:*:*:*:*",
"matchCriteriaId": "EB733D44-24AB-4FE0-8B0E-73AC2BDC6CAE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:beta_2:*:*:*:*:*:*",
"matchCriteriaId": "5A1C2818-5B30-49D5-82B2-91849BE760B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:rc:*:*:*:*:*:*",
"matchCriteriaId": "B75313EA-C5D6-453C-9A12-7BC1F1A217AA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6730538F-C3B7-4225-AB85-8308B16B0818"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "74AA0164-181D-4B1F-9AC8-E46330F877BE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "35155DDF-48A3-4986-BB9C-6A7C5E1C5747"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "65899469-E873-448E-AB9F-20711F9F3286"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E868030C-BA4B-47F7-AE30-F1E844F769DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frontaccounting:frontaccounting:2.2:beta:*:*:*:*:*:*",
"matchCriteriaId": "26EB65FE-C827-4F86-B237-86F49924CA5F"
}
]
}
]
}
],
"references": [
{
"url": "http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php",
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
]
},
{
"url": "http://frontaccounting.net/wb3/pages/posts/release-2.2-rc104.php",
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
]
},
{
"url": "http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/download",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.2%20RC/frontaccount-2.2RC.tar.gz/download",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "http://www.vupen.com/english/advisories/2009/3223",
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}
Reference in New Issue View Git Blame Copy Permalink