CVE-2012-2684

cumin: SQL injection flaw

Published Sep 28, 2012 CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Description
Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-2666 Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.
History

No history.

Weaknesses
  • CWE-89

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 7:42 PM
Reserved
May 14, 2012, 12:00 AM
Status
Modified
Published
Sep 28, 2012, 5:55 PM
Modified
Jun 16, 2026, 11:41 PM
Severity
Moderate
Public date
Sep 19, 2012, 12:00 AM