CVE-2010-4824

EUVD-2010-4789
SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Translatable extension is enabled, allows remote attackers to execute arbitrary SQL commands via the locale parameter.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
silverstripesilverstripe
2.3.0
silverstripesilverstripe
2.3.1
silverstripesilverstripe
2.3.2
silverstripesilverstripe
2.3.3
silverstripesilverstripe
2.3.4
silverstripesilverstripe
2.3.5
silverstripesilverstripe
2.3.6
silverstripesilverstripe
2.3.7
silverstripesilverstripe
2.3.8
silverstripesilverstripe
2.3.9
silverstripesilverstripe
2.4.0
silverstripesilverstripe
2.4.1
silverstripesilverstripe
2.4.2
silverstripesilverstripe
2.4.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://doc.silverstripe.org/framework/en/trunk/changelogs//2.3.10
http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4
http://open.silverstripe.org/changeset/114515
http://open.silverstripe.org/changeset/114517
http://secunia.com/advisories/42346
http://www.openwall.com/lists/oss-security/2011/01/03/12
http://www.openwall.com/lists/oss-security/2012/04/30/1
http://www.openwall.com/lists/oss-security/2012/04/30/3
http://www.openwall.com/lists/oss-security/2012/05/01/3
http://www.osvdb.org/69884
http://www.securityfocus.com/bid/45367
https://exchange.xforce.ibmcloud.com/vulnerabilities/63989
http://doc.silverstripe.org/framework/en/trunk/changelogs//2.3.10
http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4
http://open.silverstripe.org/changeset/114515
http://open.silverstripe.org/changeset/114517
http://secunia.com/advisories/42346
http://www.openwall.com/lists/oss-security/2011/01/03/12
http://www.openwall.com/lists/oss-security/2012/04/30/1
http://www.openwall.com/lists/oss-security/2012/04/30/3
http://www.openwall.com/lists/oss-security/2012/05/01/3
http://www.osvdb.org/69884
http://www.securityfocus.com/bid/45367
https://exchange.xforce.ibmcloud.com/vulnerabilities/63989