CVE-2013-5957

Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote…

published November 27, 2013

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote attackers to execute arbitrary SQL commands via the _value parameter to (1) ajax/jqState or (2) ajax/jqcounty.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02089 · 81.5th percentile
Published
2013-11-27T18:00Z
EPSS history
Timeline
  • 27 NOV 18:00Z
    Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote…
    cvelistv5