CVE ID:	CVE-2012-0805
Description:	Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.
Test IDs:	1.3.6.1.4.1.25623.1.0.123958   1.3.6.1.4.1.25623.1.0.864372   1.3.6.1.4.1.25623.1.0.71130   1.3.6.1.4.1.25623.1.0.881193   1.3.6.1.4.1.25623.1.0.864119   1.3.6.1.4.1.25623.1.0.72254   1.3.6.1.4.1.25623.1.0.72040   1.3.6.1.4.1.25623.1.0.71253   1.3.6.1.4.1.25623.1.0.831649   1.3.6.1.4.1.25623.1.0.870738   1.3.6.1.4.1.25623.1.0.72450   1.3.6.1.4.1.25623.1.0.864127
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0805 48327 http://secunia.com/advisories/48327 48328 http://secunia.com/advisories/48328 48771 http://secunia.com/advisories/48771 DSA-2449 http://www.debian.org/security/2012/dsa-2449 MDVSA-2012:059 http://www.mandriva.com/security/advisories?name=MDVSA-2012:059 RHSA-2012:0369 http://rhn.redhat.com/errata/RHSA-2012-0369.html http://www.sqlalchemy.org/changelog/CHANGES_0_7_0 http://www.sqlalchemy.org/changelog/CHANGES_0_7_0 http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7/ http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7/ https://bugs.launchpad.net/keystone/+bug/918608 https://bugs.launchpad.net/keystone/+bug/918608 sqlalchemy-select-sql-injection(73756) https://exchange.xforce.ibmcloud.com/vulnerabilities/73756