Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/73756 | vdb-entry x_refsource_XF |
| http://www.mandriva.com/security/advisories?name=MDVSA-2012:059 | vendor-advisory x_refsource_MANDRIVA |
| https://bugs.launchpad.net/keystone/+bug/918608 | x_refsource_MISC |
| http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7/ | x_refsource_CONFIRM |
| http://www.debian.org/security/2012/dsa-2449 | vendor-advisory x_refsource_DEBIAN |
| http://www.sqlalchemy.org/changelog/CHANGES_0_7_0 | x_refsource_CONFIRM |
| http://secunia.com/advisories/48771 | third-party-advisory x_refsource_SECUNIA |
| http://secunia.com/advisories/48328 | third-party-advisory x_refsource_SECUNIA |
| http://secunia.com/advisories/48327 | third-party-advisory x_refsource_SECUNIA |
| http://rhn.redhat.com/errata/RHSA-2012-0369.html | vendor-advisory x_refsource_REDHAT |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/73756 | vdb-entry x_refsource_XF x_transferred |
| http://www.mandriva.com/security/advisories?name=MDVSA-2012:059 | vendor-advisory x_refsource_MANDRIVA x_transferred |
| https://bugs.launchpad.net/keystone/+bug/918608 | x_refsource_MISC x_transferred |
| http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7/ | x_refsource_CONFIRM x_transferred |
| http://www.debian.org/security/2012/dsa-2449 | vendor-advisory x_refsource_DEBIAN x_transferred |
| http://www.sqlalchemy.org/changelog/CHANGES_0_7_0 | x_refsource_CONFIRM x_transferred |
| http://secunia.com/advisories/48771 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://secunia.com/advisories/48328 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://secunia.com/advisories/48327 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://rhn.redhat.com/errata/RHSA-2012-0369.html | vendor-advisory x_refsource_REDHAT x_transferred |