CVE-2013-4662

The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL…

published January 29, 2014

CVSS
—
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL injection attacks via a direct request to the "second layer" of the API, related to contact.getquick.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01015 · 63.0th percentile
Published
2014-01-29T18:00Z
EPSS history
Timeline
  • 29 JAN 18:00Z
    The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL…
    cvelistv5