Unrated severityNVD Advisory· Published Jul 15, 2013· Updated Apr 29, 2026
CVE-2013-3578
CVE-2013-3578
Description
SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field), leading to execution of operating-system commands.
Affected products
2- cpe:2.3:a:wave:embassy_remote_administration_server:-:*:*:*:*:*:*:*
- cpe:2.3:a:wave:embassy_remote_administration_server_help_desk:-:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.kb.cert.org/vuls/id/217836nvdUS Government Resource
News mentions
0No linked articles in our index yet.