← Volver a CVEs
CVE-2012-10006
MEDIUM5.5
Descripcion
A vulnerability classified as critical has been found in ale7714 sigeprosi. This affects an unknown part. The manipulation leads to sql injection. The identifier of the patch is 5291886f6c992316407c376145d331169c55f25b. It is recommended to apply a patch to fix this issue. The identifier VDB-218493 was assigned to this vulnerability.
Detalles CVE
Puntuacion CVSS v3.15.5
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vector de ataqueADJACENT_NETWORK
ComplejidadLOW
Privilegios requeridosLOW
Interaccion usuarioNONE
Publicado1/18/2023
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
sigeprosi_project:sigeprosi
Debilidades (CWE)
CWE-89
Referencias
https://vuldb.com/?ctiid.218493(cna@vuldb.com)
https://vuldb.com/?id.218493(cna@vuldb.com)
https://github.com/ale7714/sigeprosi/commit/5291886f6c992316407c376145d331169c55f25b(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.218493(af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.218493(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.