high7.5
CVE-2011-1913
SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to execute arbitrary SQL commands via unspe…
Impact
SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mercator | Sentinel | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-%C2%AB-sentinel-safety-information-management-system-%C2%BB/
- http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-suite/
- http://secunia.com/advisories/46014
- http://www.kb.cert.org/vuls/id/122142
- http://www.securityfocus.com/bid/49638
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69847
- http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-%C2%AB-sentinel-safety-information-management-system-%C2%BB/
- http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-suite/
- http://secunia.com/advisories/46014
- http://www.kb.cert.org/vuls/id/122142
- http://www.securityfocus.com/bid/49638
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69847