CVE-2012-0805 | Vulnetix

CVE-2012-0805 PUBLISHED CVSS 7.5 HIGH

Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.

EPSS 2.89% · 86.4th percentile

Risk Scores

CVSS 2.0

7.5

EPSS Score

2.89%

86.4th percentile

Affected Products

Vendor	Product	Versions
PyPI	SQLAlchemy	0
sqlalchemy	sqlalchemy	0, 0.6.0, 0.6.0
n/a	n/a	n/a

Timeline

Jun 5, 2012 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 13, 2022 EPSS Score
Sep 5, 2022 EPSS Score
Oct 28, 2022 EPSS Score
Dec 20, 2022 EPSS Score
Feb 11, 2023 EPSS Score
Feb 13, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 4, 2023 EPSS Score
Jul 19, 2023 EPSS Score

References

48327 third-party-advisory
http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7/ url
DSA-2449 vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-0805 advisory
https://github.com/sqlalchemy/sqlalchemy/commit/51fea2e159ca93daa0bc8066a5c35d8436d99418 url
https://github.com/pypa/advisory-database/tree/main/vulns/sqlalchemy/PYSEC-2012-9.yaml url
https://github.com/sqlalchemy/sqlalchemy package
https://web.archive.org/web/20140721183117/http://secunia.com/advisories/48771 url
https://web.archive.org/web/20140802043526/http://secunia.com/advisories/48328 url
https://web.archive.org/web/20140802044957/http://secunia.com/advisories/48327 url
http://rhn.redhat.com/errata/RHSA-2012-0369.html url
http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7 url
http://www.sqlalchemy.org/changelog/CHANGES_0_7_0 technical
http://secunia.com/advisories/48328 advisory
http://secunia.com/advisories/48771 advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:059 technical
https://bugs.launchpad.net/keystone/+bug/918608 technical
https://exchange.xforce.ibmcloud.com/vulnerabilities/73756 technical

Open in Interactive Console →