CVE-2010-0147 SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitra...
MediumCVSS 6.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco security agent | = 5.1 | No fix listed |
| cisco security agent | = 5.2 | No fix listed |
| cisco security agent | = 6.0 | No fix listed |
References
- 62444 vdb-entry
- 38619 patch third-party-advisory vendor-advisory
- 20100217 Multiple Vulnerabilities in Cisco Security Agent patch vendor-advisory
- 38272 vdb-entry
- 1023606 vdb-entry
- ADV-2010-0416 vdb-entry vendor-advisory
- cisco-sa-mgmtcenter-sql-injection(56346) vdb-entry