CVE-2012-2086

EUVD-2012-2092
SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
Affected Products (NVD)
VendorProductVersion
gajimgajim
𝑥
≤ 0.14.4
gajimgajim
0.1
gajimgajim
0.2
gajimgajim
0.2.1
gajimgajim
0.3
gajimgajim
0.4
gajimgajim
0.4.1
gajimgajim
0.5
gajimgajim
0.5.1
gajimgajim
0.6
gajimgajim
0.6.1
gajimgajim
0.7
gajimgajim
0.7.1
gajimgajim
0.8
gajimgajim
0.8.1
gajimgajim
0.8.2
gajimgajim
0.9
gajimgajim
0.9.1
gajimgajim
0.10
gajimgajim
0.10.1
gajimgajim
0.11
gajimgajim
0.11.1
gajimgajim
0.11.2
gajimgajim
0.11.3
gajimgajim
0.11.4
gajimgajim
0.12
gajimgajim
0.12.1
gajimgajim
0.12.2
gajimgajim
0.12.3
gajimgajim
0.12.4
gajimgajim
0.12.5
gajimgajim
0.12.5:alpha1
gajimgajim
0.12.5:beta1
gajimgajim
0.13
gajimgajim
0.13.1
gajimgajim
0.13.2
gajimgajim
0.13.3
gajimgajim
0.13.4
gajimgajim
0.14
gajimgajim
0.14.1
gajimgajim
0.14.2
gajimgajim
0.14.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gajim
bookworm
1.7.3-2
fixed
bullseye
1.3.1-1
fixed
sid
1.9.5-1
fixed
trixie
1.9.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gajim
hardy
ignored
lucid
Fixed 0.13-0ubuntu2.1
released
maverick
ignored
natty
Fixed 0.13.4-3ubuntu2.1
released
oneiric
Fixed 0.14.1-1ubuntu1.1
released
precise
Fixed 0.15-1
released