CVE-2011-0432

Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow…

published March 14, 2011

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) pw argument. NOTE: some of these details are obtained from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01811 · 78.3th percentile
Published
2011-03-14T19:00Z
EPSS history
Timeline
  • 14 MAR 19:00Z
    Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow…
    cvelistv5