CVE-2013-4422

SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
quassel-ircquassel_irc
𝑥
≤ 0.9.0
quassel-ircquassel_irc
0.1.0
quassel-ircquassel_irc
0.3.0
quassel-ircquassel_irc
0.3.0.1
quassel-ircquassel_irc
0.3.0.2
quassel-ircquassel_irc
0.3.0.3
quassel-ircquassel_irc
0.3.1
quassel-ircquassel_irc
0.4.0
quassel-ircquassel_irc
0.4.1
quassel-ircquassel_irc
0.4.2
quassel-ircquassel_irc
0.4.3
quassel-ircquassel_irc
0.5.0
quassel-ircquassel_irc
0.6.1
quassel-ircquassel_irc
0.6.2
quassel-ircquassel_irc
0.6.3
quassel-ircquassel_irc
0.7.0
quassel-ircquassel_irc
0.7.1
quassel-ircquassel_irc
0.7.2
quassel-ircquassel_irc
0.7.3
quassel-ircquassel_irc
0.7.4
quassel-ircquassel_irc
0.8.0
quassel-ircquassel_irc
𝑥
≤ 0.9.0
quassel-ircquassel_irc
0.1.0
quassel-ircquassel_irc
0.3.0
quassel-ircquassel_irc
0.3.0.1
quassel-ircquassel_irc
0.3.0.2
quassel-ircquassel_irc
0.3.0.3
quassel-ircquassel_irc
0.3.1
quassel-ircquassel_irc
0.4.0
quassel-ircquassel_irc
0.4.1
quassel-ircquassel_irc
0.4.2
quassel-ircquassel_irc
0.4.3
quassel-ircquassel_irc
0.5.0
quassel-ircquassel_irc
0.6.1
quassel-ircquassel_irc
0.6.2
quassel-ircquassel_irc
0.6.3
quassel-ircquassel_irc
0.7.0
quassel-ircquassel_irc
0.7.1
quassel-ircquassel_irc
0.7.2
quassel-ircquassel_irc
0.7.3
quassel-ircquassel_irc
0.7.4
quassel-ircquassel_irc
0.8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
quassel
bullseye
1:0.13.1-5
fixed
wheezy
no-dsa
squeeze
not-affected
bookworm
1:0.14.0-1
fixed
sid
1:0.14.0-2
fixed
trixie
1:0.14.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
quassel
raring
not-affected
quantal
not-affected
precise
not-affected
lucid
ignored