CERTA-2008-AVI-564

Vulnerability from certfr_avis - Published: 2008-11-25 - Updated: 2008-11-25

Deux vulnérabilités dans Cadic Intégrale permettent de réaliser des injections SQL.

Description

Deux vulnérabilités ont été découvertes dans Cadic Intégrale. L'exploitation de ces vulnérabilités permet de réaliser des injections SQL.

Solution

Des correctifs de sécurité ont été réalisés par l'éditeur du produit Cadic Intégrale. Ils sont disponibles auprès de l'assistance de l'éditeur ou via le site http://club.cadic.fr.

Cadic Intégrale versions 5.2 à 5.4.b.

Impacted products
Vendor Product Description
References

Show details on source website

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eCadic Int\u00e9grale\u003c/SPAN\u003e versions 5.2 \u00e0  5.4.b.\u003c/P\u003e",
  "content": "## Description\n\nDeux vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Cadic Int\u00e9grale.\nL\u0027exploitation de ces vuln\u00e9rabilit\u00e9s permet de r\u00e9aliser des injections\nSQL.\n\n## Solution\n\nDes correctifs de s\u00e9curit\u00e9 ont \u00e9t\u00e9 r\u00e9alis\u00e9s par l\u0027\u00e9diteur du produit\nCadic Int\u00e9grale. Ils sont disponibles aupr\u00e8s de l\u0027assistance de\nl\u0027\u00e9diteur ou via le site \u003chttp://club.cadic.fr\u003e.\n",
  "cves": [],
  "initial_release_date": "2008-11-25T00:00:00",
  "last_revision_date": "2008-11-25T00:00:00",
  "links": [
    {
      "title": "Site de l\u0027\u00e9diteur :",
      "url": "http://www.cadic.eu/"
    },
    {
      "title": "Site du club des utilisateurs de Cadic Int\u00e9grale :",
      "url": "http://club.cadic.fr/"
    }
  ],
  "reference": "CERTA-2008-AVI-564",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-11-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s dans \u003cspan class=\"textit\"\u003eCadic Int\u00e9grale\u003c/span\u003e\npermettent de r\u00e9aliser des injections SQL.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Cadic Int\u00e9grale",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Soci\u00e9t\u00e9 Cadic",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…