{"api_version":"1","generated_at":"2026-07-23T10:41:45+00:00","cve":"CVE-2011-5038","urls":{"html":"https://cve.report/CVE-2011-5038","api":"https://cve.report/api/cve/CVE-2011-5038.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-5038","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-5038"},"summary":{"title":"CVE-2011-5038","description":"SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","state":"PUBLISHED","assigner":"mitre","published_at":"2011-12-30 19:55:00","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.osvdb.org/77580","name":"http://www.osvdb.org/77580","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/71740","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/71740","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/47140","name":"http://secunia.com/advisories/47140","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA47140 - HitAppoint "username" SQL Injection Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-5038","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-5038","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.0.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.0.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.0.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.0.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.0.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.0.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.0.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.0.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.4.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"4.5.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"5038","vulnerable":"1","versionEndIncluding":"4.5.17","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hitcode","cpe5":"hitappoint","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T00:23:39.721Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"hitappoint-index-sql-injection(71740)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/71740"},{"name":"77580","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/77580"},{"name":"47140","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/47140"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-12-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"hitappoint-index-sql-injection(71740)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/71740"},{"name":"77580","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/77580"},{"name":"47140","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/47140"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2011-5038","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"hitappoint-index-sql-injection(71740)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/71740"},{"name":"77580","refsource":"OSVDB","url":"http://www.osvdb.org/77580"},{"name":"47140","refsource":"SECUNIA","url":"http://secunia.com/advisories/47140"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2011-5038","datePublished":"2011-12-30T19:00:00.000Z","dateReserved":"2011-12-30T00:00:00.000Z","dateUpdated":"2024-08-07T00:23:39.721Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-12-30 19:55:00","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.17","matchCriteriaId":"0CF14A9D-BFCD-4BF1-BEFA-C733F0A06782"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.0:*:*:*:*:*:*:*","matchCriteriaId":"518077EA-3352-40B9-9DCE-D4980604A0F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"06A4CB74-D0D9-4963-BAE6-6343CCC326A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E27E414B-BA74-4FE0-B61C-F835FACB1E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"F36A1BA0-5473-445E-92A2-6A0F388D87CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"A9EE306E-8C10-4815-8B5E-5E65F365C823"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"F479DA38-0346-412A-86AD-28AB00F4D5E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"45BDB072-DDEA-44EE-A0E1-B8030AA38E7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"AEECEBA8-F616-404B-9D7C-198C64100D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"DFCE325F-17F0-4956-ABC4-B9A9C58AD626"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"F0FD109B-44E8-41F8-A83B-7B5976BB7807"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC4592A-7387-4E32-8969-64B55A59C4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E34FAABC-C5CB-4F08-B4F2-AC306362DDB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20958153-7778-4101-8580-8729DDD15864"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B6CC0CAE-8B35-4034-963E-2E8FF9E74B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7ABDB91E-8BE9-45D7-A260-D75029FD97C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D4A0FC3C-29A2-4089-9AE2-AF900F80361D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9D786533-5819-48EB-8BEB-44B5C06B116A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"35A6A973-1116-4FCE-94FE-3E8EF914D3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA214FFC-70C9-47F9-A326-3B48BA666F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"74DC82C2-7950-4EB6-A4CB-9DB5A6870645"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CF99A868-FDB1-411F-8B3E-BACED87E988A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2A85EE1F-5067-4525-820A-BB5DB794FA50"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"729BC973-AFA6-431D-A1B6-1A05FB4899DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"671A68C1-1258-4E26-B62A-E51130E36A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C85D0C81-6A32-4050-889F-26375E270827"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9B2B7384-8CA8-429F-9F0B-483D70237734"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6875CD8-06AF-4C0B-89FF-48C68406A713"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"7F0D02EA-0F92-4891-A089-054C09EDC9A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E5EA6A81-3C8B-4658-B609-9C42879E6884"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"231F8416-2B58-4687-B4F0-E66B8F0E6996"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A789B27-F984-483E-B82A-D33007805B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"16252B41-2DA4-4170-A757-EDB8F9CC7572"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"7E0470A0-0EB5-4C2F-9421-D487532840FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"21EA10D6-385D-4219-A8EC-ED0D8B3F1F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"7CC58E8E-9F03-4BB5-8C02-EF05887B9681"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8D4D8D2B-5647-4A83-8686-BF470F898090"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"31BEFD2B-C743-4E65-94C8-174C4B22CC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"CD4E6991-E50B-42DA-927A-8BEC929EFE32"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"FC059053-4073-46BE-AFD3-6FB4F5813D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.:*:*:*:*:*:*:*","matchCriteriaId":"B66C55C0-EBA5-4A3B-AA2A-57ECC662583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BE0C184E-E09B-49E7-A09F-22C55B0B6BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"78C25A7B-9340-4671-B909-31E191D4A614"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C561D171-D1D8-4656-B255-9300794806B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"24BBD451-452C-4DAF-83F2-60918F147553"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"8316B25D-9F46-432D-B101-AAAAC1F01224"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F3B3C534-B869-4107-990F-E8D9C6229395"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"329E731E-2965-42AE-9C7A-5ABDFDF04704"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"23456918-8ADD-4261-AFDC-79A28EBFB744"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.9:*:*:*:*:*:*:*","matchCriteriaId":"C7B20EF7-2325-4E41-AEC5-2BD65C86780E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C2177DF7-52C6-4485-B5CE-2D07C2C51872"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.11:*:*:*:*:*:*:*","matchCriteriaId":"D919644D-13DF-415F-BF5E-55AD01E3599C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.12:*:*:*:*:*:*:*","matchCriteriaId":"3938B59A-5823-49AE-AC60-A2174C463DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.13:*:*:*:*:*:*:*","matchCriteriaId":"5937D77B-280E-4E56-B169-01C61C5C817D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.14:*:*:*:*:*:*:*","matchCriteriaId":"969C716E-72E7-4ABC-B40C-B9BA15A0815F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E2A01796-D4FD-49F2-967F-3DF7E86ED72E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitcode:hitappoint:4.5.16:*:*:*:*:*:*:*","matchCriteriaId":"D876B888-8D6F-453D-844C-D2FBCE76A048"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"5038","Ordinal":"1","Title":"CVE-2011-5038","CVE":"CVE-2011-5038","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"5038","Ordinal":"1","NoteData":"SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","Type":"Description","Title":"CVE-2011-5038"},{"CveYear":"2011","CveId":"5038","Ordinal":"2","NoteData":"2011-12-30","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"5038","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}