PT-2023-9945 · Unknown · Uakfdotb Oneapp

Published 2023-02-20 · Updated 2024-05-17 · CVE-2012-10008

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions uakfdotb oneapp (affected versions not specified)

Description A critical issue has been found in uakfdotb oneapp, affecting some unknown processing, which leads to sql injection. The attack may be initiated remotely.

Recommendations To fix this issue, it is recommended to apply a patch named 5413ac804f1b09f9decc46a6c37b08352c49669c. As a temporary workaround, consider restricting access to the application to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2012-10008

Affected Products

Uakfdotb Oneapp

References · 7

• https://github.com/uakfdotb/oneapp/commit/5413ac804f1b09f9decc46a6c37b08352c49669c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2012-10008 · Security Note
• https://t.me/cvenotify/44675 · Telegram Post
• https://vuldb.com/?id.221483 · Note
• https://t.me/cvenotify/59366 · Telegram Post
• https://vuldb.com/?ctiid.221483 · Note
• https://t.me/cibsecurity/58516 · Telegram Post