Skip to content

CVE-2011-0467 SQL injection in SUSE studio via select parameter

HighCVSS 8.8 EPSS 1.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.

Affected products

ProductAffected versionsFixed in
SUSE studio onsite < 1.0.3-0.18.1 1.0.3-0.18.1
SUSE studio onsite appliance < 1.1.2-0.25.1 1.1.2-0.25.1
SUSE Studio Onsite < 1.0.3-0.18.1 1.0.3-0.18.1
SUSE Studio Onsite 1.1 Appliance < 1.1.2-0.25.1 1.1.2-0.25.1

References