CVE-2011-0467: SQL injection in SUSE studio via select parameter
A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2011-0467?
CVE-2011-0467 is a vulnerability in the listing of available software of SUSE Studio Onsite, which allows authenticated users to execute arbitrary SQL statements via SQL injection.
How does CVE-2011-0467 impact SUSE Studio Onsite?
CVE-2011-0467 allows authenticated users to execute arbitrary SQL statements, potentially leading to unauthorized access and manipulation of data.
What is the severity level of CVE-2011-0467?
The severity level of CVE-2011-0467 is high with a CVSS score of 8.8.
Which versions of SUSE Studio Onsite are affected by CVE-2011-0467?
Versions prior to 1.0.3-0.18.1 of SUSE Studio Onsite and versions up to 1.1.2-0.25.1 of SUSE Studio Onsite Appliance are affected by CVE-2011-0467.
How can I fix CVE-2011-0467 vulnerability in SUSE Studio Onsite?
To fix CVE-2011-0467, update your SUSE Studio Onsite to version 1.0.3-0.18.1 or later, and update SUSE Studio Onsite Appliance to version 1.1.2-0.25.1 or later.