CVE-2013-3578
Last modified
CVE-2013-3578 is a vulnerability of currently unknown severity. SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field), leading to execution of operating-system commands.. EPSS estimates a 2.46% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field), leading to execution of operating-system commands.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wave | Embassy Remote Administration Server | All versions |
| Wave | Embassy Remote Administration Server Help Desk | All versions |
References
- http://www.kb.cert.org/vuls/id/217836US Government Resource
- http://www.kb.cert.org/vuls/id/217836US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-3578?
How severe is CVE-2013-3578?
How do I fix CVE-2013-3578?
Are you affected by CVE-2013-3578?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
