CVE-2010-0147

Description

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/56346

http://www.vupen.com/english/advisories/2010/0416

http://www.securitytracker.com/id?1023606

http://www.securityfocus.com/bid/38272

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml

http://secunia.com/advisories/38619

http://osvdb.org/62444

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3