SilverStripe CVE-2011-4959 SQL-Injection Vulnerability

Bugtraq ID:	73544
Class:	Input Validation Error
CVE:	CVE-2011-4959
Remote:	Yes
Local:	No
Published:	Sep 17 2012 12:00AM
Updated:	Sep 17 2012 12:00AM
Credit:	Unknown
Vulnerable:	SilverStripe SilverStripe 2.4.5 SilverStripe SilverStripe 2.4 SilverStripe SilverStripe 2.3.8 SilverStripe SilverStripe 2.3.6 SilverStripe SilverStripe 2.3.5 SilverStripe SilverStripe 2.3.4 SilverStripe SilverStripe 2.3.1 SilverStripe SilverStripe 2.3 SilverStripe SilverStripe 2.4.4 SilverStripe SilverStripe 2.4.3 SilverStripe SilverStripe 2.4.2 SilverStripe SilverStripe 2.4.1 SilverStripe SilverStripe 2.3.8 SilverStripe SilverStripe 2.3.7 SilverStripe SilverStripe 2.3.3 SilverStripe SilverStripe 2.3.2 SilverStripe SilverStripe 2.3.11 SilverStripe SilverStripe 2.3.10
Not Vulnerable:

SilverStripe CVE-2011-4959 SQL-Injection Vulnerability

SilverStripe is prone to a sql-injection vulnerability. SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL database using far east character encodings, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

SilverStripe CVE-2011-4959 SQL-Injection Vulnerability

References:

• http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12 (MISC)
  
• http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6 (MISC)
  
• https://github.com/silverstripe/sapphire/commit/73cca09 (MISC)
  
• https://github.com/silverstripe/sapphire/commit/ca78784 (MISC)
  
• https://github.com/silverstripe/silverstripe-cms/commit/b5ea2f6 (MISC)
  
• oss-security - CVE-request: SilverStripe before 2.4.4 (MLIST)
  
• oss-security - Re: CVE-request: SilverStripe before 2.4.4 (MLIST)