PT-2011-3473 · Enspire · Enspire Distribution Management Solution+1

Alastair Gray · Publicado 2011-11-01 · Atualizado 2012-02-29 · CVE-2011-1915

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Enspire Distribution Management Solution version 7.3.2.7 eClient version 7.3.2.3

Description The issue allows remote attackers to execute arbitrary SQL commands.

Recommendations For Enspire Distribution Management Solution version 7.3.2.7, update to a version that fixes the SQL injection issue. For eClient version 7.3.2.3, consider restricting access to sensitive SQL commands until a patch is available.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2011-1915

Produtos afetados

Enspire Distribution Management Solution

Eclient

Referências · 3

• http://secunia.com/advisories/46638 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-1915 · Nota de Segurança
• http://kb.cert.org/vuls/id/402731 · Nota