CVE-2013-4386 in Foreman
Summary
Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/12/2013
Disclosure
11/20/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65504 | Theforeman Foreman sql injection | 89 | Not defined | Official fix | CVE-2013-4386 |