QwikSec

Security Database

CVE

CWE

Training

CVE-2013-6025

Published: Oct 19, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_CERT-VN

vdb-entry

x_refsource_BID

sybase-ase-cve20136025-xml-injection(88105)

vdb-entry

x_refsource_XF

exploit

x_refsource_EXPLOIT-DB

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.