Vulnerability Description
SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field), leading to execution of operating-system commands.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wave | Embassy Remote Administration Server | - |
| Wave | Embassy Remote Administration Server Help Desk | - |
Related Weaknesses (CWE)
References
- http://www.kb.cert.org/vuls/id/217836US Government Resource
- http://www.kb.cert.org/vuls/id/217836US Government Resource
FAQ
What is CVE-2013-3578?
CVE-2013-3578 is a vulnerability with a CVSS score of 9.0 (HIGH). SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainCont...
How severe is CVE-2013-3578?
CVE-2013-3578 has been rated HIGH with a CVSS base score of 9.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-3578?
Check the references section above for vendor advisories and patch information. Affected products include: Wave Embassy Remote Administration Server, Wave Embassy Remote Administration Server Help Desk.