Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-0805
7.5
HIGHCVSS v2
Published
June 5, 2012
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.
SQLAlchemyPython Package IndexDatabase Abstraction Library
Python Package IndexDatabase Abstraction Library= 0.6.1, = 0.7.0, = 0.6.3, = 0.6.0, = 0.6.4, = 0.6.5, <= 0.7.0, = 0.6.7, = 0.6.6, = 0.6.2NVD
sqlalchemy/sqlalchemy
GitHubThe Database Toolkit for Python
GitHubThe Database Toolkit for Python= 0.6.1, = 0.7.0, = 0.6.3, = 0.6.0, = 0.6.4, = 0.6.5, <= 0.7.0, = 0.6.7, = 0.6.6, = 0.6.2NVD