CVE-2013-1462
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-1462
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (incorrect memory copy) via a SOAPAction header that lacks a " (double quote) character, a different vulnerability than CVE-2013-0230.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
MiniUPnP MiniUPnPd ‘ExecuteSoapAction’函数整数符号转换漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MiniUPnP Client（又名MiniUPnPc）是MiniUPnP项目开发的一个能够实现应用程序使用支持UPnP的Internet网关设备转发端口的库。 MiniUPnP MiniUPnPd 1.0版本中的HTTP服务器中的SOAPAction处理器中的ExecuteSoapAction函数中存在整数符号转换漏洞。通过缺少''（双引号）字符的SOAPAction头，远程攻击者利用该漏洞导致拒绝服务（不正确内存转换）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-1462
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-1462
请登录查看更多情报信息。
Same Patch Batch · n/a · 2013-01-31 · 42 CVEs total
| CVE-2011-5255 | X3 CMS 多个跨站脚本漏洞 | |
| CVE-2012-0702 | IBM InfoSphere Information Server ISF 授权问题漏洞 | |
| CVE-2012-0703 | IBM InfoSphere Information Server ISF 输入验证漏洞 | |
| CVE-2012-0705 | IBM InfoSphere Information Server MBB 输入验证漏洞 | |
| CVE-2012-4819 | IBM InfoSphere Information Server 跨站脚本漏洞 | |
| CVE-2012-4832 | IBM InfoSphere Information Server 信息泄露漏洞 | |
| CVE-2012-6029 | Cisco Network Admission Control 跨站脚本漏洞 | |
| CVE-2012-6350 | IBM Cognos TM1 Web组件跨站脚本漏洞 | |
| CVE-2013-1112 | Cisco IOS XR 未明拒绝服务漏洞 | |
| CVE-2013-1113 | Cisco Unified Communications Domain Manager 跨站脚本漏洞 | |
| CVE-2010-5287 | Cornerstone Technologies webConductor SQL注入漏洞 | |
| CVE-2012-0701 | IBM InfoSphere Information Server DataStage Administrator客户端权限许可和访问控制漏洞 | |
| CVE-2012-6522 | w-CMS 目录遍历漏洞 | |
| CVE-2012-6523 | w-CMS 多个跨站脚本漏洞 | |
| CVE-2012-6524 | pGB ‘kommentar.php’ SQL注入漏洞 | |
| CVE-2012-6525 | PhpBridges ‘members.php’ SQL注入漏洞 | |
| CVE-2012-6526 | Vastal I-Tech Freelance Zone ‘show_code.php’ SQL注入漏洞 | |
| CVE-2012-6527 | WordPress ‘My Calendar’插件跨站脚本漏洞 | |
| CVE-2012-6528 | ATutor 跨站脚本漏洞 | |
| CVE-2012-6529 | Marinet CMS SQL注入漏洞 |
Showing top 20 of 42 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2013-1462
No comments yet