QwikSec

Security Database

CVE

CWE

Training

CVE-2013-0140

Published: May 1, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_CERT-VN

https://kc.mcafee.com/corporate/index?page=content&id=SB10042

x_refsource_CONFIRM

third-party-advisory

x_refsource_CERT

vdb-entry

x_refsource_BID

20140427 Re: Exploit: McAfee ePolicy 0wner (ePowner ) Ã¢â¬â Release

mailing-list

x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.