CVE-2011-4460

EPSS 1.77%
Veröffentlicht 04.06.2012 19:55:01
Zuletzt bearbeitet 16.06.2026 23:34:55
Erkennungen
Login

SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

NVD 187 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Bestpractical ≫ Rt Version 2.0.0

Bestpractical ≫ Rt Version 2.0.1

Bestpractical ≫ Rt Version 2.0.2

Bestpractical ≫ Rt Version 2.0.3

Bestpractical ≫ Rt Version 2.0.4

Bestpractical ≫ Rt Version 2.0.5

Bestpractical ≫ Rt Version 2.0.5.1

Bestpractical ≫ Rt Version 2.0.5.3

Bestpractical ≫ Rt Version 2.0.6

Bestpractical ≫ Rt Version 2.0.7

Bestpractical ≫ Rt Version 2.0.8

Bestpractical ≫ Rt Version 2.0.8.2

Bestpractical ≫ Rt Version 2.0.9

Bestpractical ≫ Rt Version 2.0.11

Bestpractical ≫ Rt Version 2.0.12

Bestpractical ≫ Rt Version 2.0.13

Bestpractical ≫ Rt Version 2.0.14

Bestpractical ≫ Rt Version 2.0.15

Bestpractical ≫ Rt Version 3.0.0

Bestpractical ≫ Rt Version 3.0.1

Bestpractical ≫ Rt Version 3.0.2

Bestpractical ≫ Rt Version 3.0.3

Bestpractical ≫ Rt Version 3.0.4

Bestpractical ≫ Rt Version 3.0.5

Bestpractical ≫ Rt Version 3.0.6

Bestpractical ≫ Rt Version 3.0.7

Bestpractical ≫ Rt Version 3.0.7.1

Bestpractical ≫ Rt Version 3.0.8

Bestpractical ≫ Rt Version 3.0.9

Bestpractical ≫ Rt Version 3.0.10

Bestpractical ≫ Rt Version 3.0.10 Update pre1

Bestpractical ≫ Rt Version 3.0.10 Update pre2

Bestpractical ≫ Rt Version 3.0.10 Update rc1

Bestpractical ≫ Rt Version 3.0.11

Bestpractical ≫ Rt Version 3.0.11 Update rc2

Bestpractical ≫ Rt Version 3.0.11 Update rc3

Bestpractical ≫ Rt Version 3.0.11 Update rc4

Bestpractical ≫ Rt Version 3.0.12

Bestpractical ≫ Rt Version 3.1.2

Bestpractical ≫ Rt Version 3.1.3

Bestpractical ≫ Rt Version 3.1.4

Bestpractical ≫ Rt Version 3.1.5

Bestpractical ≫ Rt Version 3.1.6

Bestpractical ≫ Rt Version 3.1.7

Bestpractical ≫ Rt Version 3.1.8

Bestpractical ≫ Rt Version 3.1.10

Bestpractical ≫ Rt Version 3.1.11

Bestpractical ≫ Rt Version 3.1.12

Bestpractical ≫ Rt Version 3.1.13

Bestpractical ≫ Rt Version 3.1.14

Bestpractical ≫ Rt Version 3.1.15

Bestpractical ≫ Rt Version 3.1.16

Bestpractical ≫ Rt Version 3.1.17

Bestpractical ≫ Rt Version 3.2.0

Bestpractical ≫ Rt Version 3.2.0 Update rc1

Bestpractical ≫ Rt Version 3.2.0 Update rc2

Bestpractical ≫ Rt Version 3.2.0 Update rc3

Bestpractical ≫ Rt Version 3.2.0 Update rc4

Bestpractical ≫ Rt Version 3.2.1

Bestpractical ≫ Rt Version 3.2.1 Update rc1

Bestpractical ≫ Rt Version 3.2.1 Update rc2

Bestpractical ≫ Rt Version 3.2.1 Update rc3

Bestpractical ≫ Rt Version 3.2.1 Update rc4

Bestpractical ≫ Rt Version 3.2.2

Bestpractical ≫ Rt Version 3.2.2 Update rc1

Bestpractical ≫ Rt Version 3.2.3

Bestpractical ≫ Rt Version 3.2.3 Update rc1

Bestpractical ≫ Rt Version 3.2.3 Update rc2

Bestpractical ≫ Rt Version 3.4.0

Bestpractical ≫ Rt Version 3.4.0 Update rc1

Bestpractical ≫ Rt Version 3.4.0 Update rc2

Bestpractical ≫ Rt Version 3.4.0 Update rc3

Bestpractical ≫ Rt Version 3.4.0 Update rc4

Bestpractical ≫ Rt Version 3.4.0 Update rc5

Bestpractical ≫ Rt Version 3.4.0 Update rc6

Bestpractical ≫ Rt Version 3.4.1

Bestpractical ≫ Rt Version 3.4.2

Bestpractical ≫ Rt Version 3.4.2 Update rc1

Bestpractical ≫ Rt Version 3.4.2 Update rc2

Bestpractical ≫ Rt Version 3.4.3

Bestpractical ≫ Rt Version 3.4.3 Update rc1

Bestpractical ≫ Rt Version 3.4.3 Update rc2

Bestpractical ≫ Rt Version 3.4.4

Bestpractical ≫ Rt Version 3.4.4 Update pre1

Bestpractical ≫ Rt Version 3.4.4 Update pre2

Bestpractical ≫ Rt Version 3.4.4 Update pre3

Bestpractical ≫ Rt Version 3.4.5

Bestpractical ≫ Rt Version 3.4.5 Update pre1

Bestpractical ≫ Rt Version 3.4.5 Update rc1

Bestpractical ≫ Rt Version 3.4.5 Update rc2

Bestpractical ≫ Rt Version 3.4.6

Bestpractical ≫ Rt Version 3.4.6 Update rc1

Bestpractical ≫ Rt Version 3.4.6 Update rc2

Bestpractical ≫ Rt Version 3.4.7 Update rc1

Bestpractical ≫ Rt Version 3.5.1

Bestpractical ≫ Rt Version 3.5.2

Bestpractical ≫ Rt Version 3.5.3

Bestpractical ≫ Rt Version 3.5.4

Bestpractical ≫ Rt Version 3.5.5

Bestpractical ≫ Rt Version 3.5.6

Bestpractical ≫ Rt Version 3.5.7

Bestpractical ≫ Rt Version 3.6.0

Bestpractical ≫ Rt Version 3.6.0 Update pre0

Bestpractical ≫ Rt Version 3.6.0 Update pre1

Bestpractical ≫ Rt Version 3.6.0 Update rc1

Bestpractical ≫ Rt Version 3.6.0 Update rc2

Bestpractical ≫ Rt Version 3.6.0 Update rc3

Bestpractical ≫ Rt Version 3.6.1

Bestpractical ≫ Rt Version 3.6.1 Update pre2

Bestpractical ≫ Rt Version 3.6.1 Update rc1

Bestpractical ≫ Rt Version 3.6.1 Update rc2

Bestpractical ≫ Rt Version 3.6.2

Bestpractical ≫ Rt Version 3.6.2 Update rc1

Bestpractical ≫ Rt Version 3.6.2 Update rc3

Bestpractical ≫ Rt Version 3.6.2 Update rc4

Bestpractical ≫ Rt Version 3.6.2 Update rc5

Bestpractical ≫ Rt Version 3.6.3

Bestpractical ≫ Rt Version 3.6.3 Update rc1

Bestpractical ≫ Rt Version 3.6.3 Update rc2

Bestpractical ≫ Rt Version 3.6.3 Update rc3

Bestpractical ≫ Rt Version 3.6.3 Update rc4

Bestpractical ≫ Rt Version 3.6.4

Bestpractical ≫ Rt Version 3.6.4 Update rc1

Bestpractical ≫ Rt Version 3.6.4 Update rc2

Bestpractical ≫ Rt Version 3.6.5

Bestpractical ≫ Rt Version 3.6.5 Update rc1

Bestpractical ≫ Rt Version 3.6.5 Update rc2

Bestpractical ≫ Rt Version 3.6.6

Bestpractical ≫ Rt Version 3.6.6 Update rc1

Bestpractical ≫ Rt Version 3.6.6 Update rc2

Bestpractical ≫ Rt Version 3.6.6 Update rc3

Bestpractical ≫ Rt Version 3.6.7

Bestpractical ≫ Rt Version 3.6.8

Bestpractical ≫ Rt Version 3.6.9

Bestpractical ≫ Rt Version 3.6.10

Bestpractical ≫ Rt Version 3.7.1

Bestpractical ≫ Rt Version 3.7.5

Bestpractical ≫ Rt Version 3.7.80

Bestpractical ≫ Rt Version 3.7.85

Bestpractical ≫ Rt Version 3.7.86

Bestpractical ≫ Rt Version 3.8.0

Bestpractical ≫ Rt Version 3.8.0 Update rc1

Bestpractical ≫ Rt Version 3.8.0 Update rc2

Bestpractical ≫ Rt Version 3.8.0 Update rc3

Bestpractical ≫ Rt Version 3.8.1

Bestpractical ≫ Rt Version 3.8.1 Update rc1

Bestpractical ≫ Rt Version 3.8.1 Update rc2

Bestpractical ≫ Rt Version 3.8.1 Update rc3

Bestpractical ≫ Rt Version 3.8.1 Update rc4

Bestpractical ≫ Rt Version 3.8.1 Update rc5

Bestpractical ≫ Rt Version 3.8.2

Bestpractical ≫ Rt Version 3.8.2 Update rc1

Bestpractical ≫ Rt Version 3.8.2 Update rc2

Bestpractical ≫ Rt Version 3.8.3

Bestpractical ≫ Rt Version 3.8.3 Update rc1

Bestpractical ≫ Rt Version 3.8.3 Update rc2

Bestpractical ≫ Rt Version 3.8.4

Bestpractical ≫ Rt Version 3.8.4 Update rc1

Bestpractical ≫ Rt Version 3.8.5

Bestpractical ≫ Rt Version 3.8.6

Bestpractical ≫ Rt Version 3.8.6 Update rc1

Bestpractical ≫ Rt Version 3.8.7

Bestpractical ≫ Rt Version 3.8.7 Update rc1

Bestpractical ≫ Rt Version 3.8.8

Bestpractical ≫ Rt Version 3.8.8 Update rc2

Bestpractical ≫ Rt Version 3.8.8 Update rc3

Bestpractical ≫ Rt Version 3.8.8 Update rc4

Bestpractical ≫ Rt Version 3.8.9

Bestpractical ≫ Rt Version 3.8.9 Update rc1

Bestpractical ≫ Rt Version 3.8.9 Update rc2

Bestpractical ≫ Rt Version 3.8.9 Update rc3

Bestpractical ≫ Rt Version 3.8.10

Bestpractical ≫ Rt Version 3.8.11

Bestpractical ≫ Rt Version 4.0.0

Bestpractical ≫ Rt Version 4.0.0 Update rc1

Bestpractical ≫ Rt Version 4.0.0 Update rc2

Bestpractical ≫ Rt Version 4.0.0 Update rc3

Bestpractical ≫ Rt Version 4.0.0 Update rc4

Bestpractical ≫ Rt Version 4.0.0 Update rc5

Bestpractical ≫ Rt Version 4.0.0 Update rc6

Bestpractical ≫ Rt Version 4.0.0 Update rc7

Bestpractical ≫ Rt Version 4.0.0 Update rc8

Bestpractical ≫ Rt Version 4.0.1

Bestpractical ≫ Rt Version 4.0.2

Bestpractical ≫ Rt Version 4.0.3

Bestpractical ≫ Rt Version 4.0.4

Bestpractical ≫ Rt Version 4.0.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.77%	0.753

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html

Patch

Vendor Advisory

http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html

Patch

http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html

Patch

http://secunia.com/advisories/49259

http://www.securityfocus.com/bid/53660

http://osvdb.org/82136

https://exchange.xforce.ibmcloud.com/vulnerabilities/75824

https://nvd.nist.gov/vuln/detail/CVE-2011-4460