SecuritySpace - CVE-2013-4882

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-4882

Description: Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/showRegisteredTypeDetails.do and (2) EPOAGENTMETA/DisplayMSAPropsDetail.do, a different vulnerability than CVE-2013-0140.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-4882
Bugtraq: 20130712 Multiple vulnerabilities in McAfee ePO 4.6.6 (Google Search)
http://www.securityfocus.com/archive/1/527228
http://www.securitytracker.com/id/1028803

CVE ID:	CVE-2013-4882
Description:	Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/showRegisteredTypeDetails.do and (2) EPOAGENTMETA/DisplayMSAPropsDetail.do, a different vulnerability than CVE-2013-0140.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4882 Bugtraq: 20130712 Multiple vulnerabilities in McAfee ePO 4.6.6 (Google Search) http://www.securityfocus.com/archive/1/527228 http://www.securitytracker.com/id/1028803