Description
SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter.
References (8)
Core 8
Core References
Patch x_refsource_confirm
https://trac.gajim.org/changeset/988e38ce0e0c
Exploit x_refsource_confirm
https://trac.gajim.org/ticket/7034
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/48794
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/48708
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/04/08/1
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201208-04.xml
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/04/08/2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/52943
Scores
EPSS
0.0240
EPSS Percentile
82.3%
Details
CWE
CWE-89
Status
published
Products (40)
gajim/gajim
0.1
gajim/gajim
0.2
gajim/gajim
0.2.1
gajim/gajim
0.3
gajim/gajim
0.4
gajim/gajim
0.4.1
gajim/gajim
0.5
gajim/gajim
0.5.1
gajim/gajim
0.6
gajim/gajim
0.6.1
... and 30 more
Published
Nov 23, 2012
Tracked Since
Feb 18, 2026