VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 15, 2013· Updated Jun 16, 2026

CVE-2013-3578

CVE-2013-3578

Description

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field), leading to execution of operating-system commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Wave/Embassy Remote Administration Server Help Desk3 versions
    cpe:2.3:a:wave:embassy_remote_administration_server:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:wave:embassy_remote_administration_server:-:*:*:*:*:*:*:*
    • cpe:2.3:a:wave:embassy_remote_administration_server_help_desk:-:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.