CVE-2012-2086

 

Published at: - 23-11-2012 09:55

Last modified: - 28-09-2022 11:06

Total changes: - 2

Description

SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• https://trac.gajim.org/ticket/7034
• 48708-Vendor Advisory
• https://trac.gajim.org/changeset/988e38ce0e0c
• 52943-
• [oss-security] 20120408 CVE request: gajim - code execution and sql injection-
• [oss-security] 20120408 Re: CVE request: gajim - code execution and sql injection-
• 48794-
• GLSA-201208-04-

 

Keywords

NVD

 

CVE-2012-2086

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures