CVE-2013-4945

Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the (1)…

published July 29, 2013

CVSS
—
EPSS
1%
Percentile
65.3
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the (1) ASPSESSIONIDASSRATTQ, (2) TABLE_WIDGET_1, (3) TABLE_WIDGET_2, (4) browserDateTimeInfo, or (5) browserNumberInfo cookie parameter to DashBoardGUI.aspx; or the (6) UID parameter to login.aspx.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01106 · 65.3th percentile
Published
2013-07-29T22:00Z
EPSS history
Timeline
  • 29 JUL 22:00Z
    Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the (1)…
    cvelistv5