VIR Vulnerability Intelligence Relay

CVE-2013-5697

high
Published 2013-09-30 · Modified 2026-04-29
CVSS v3
—
CVSS v2
7.5
VIR risk
7.5

Description

SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary SQL commands via a Host header.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact
VendorProductVersionsFixed
simone_tellinimod_accounting{"endIncluding":"0.5"}
apache apachehttp_server1.3
apache apachehttp_server1.3.0
apache apachehttp_server1.3.1
apache apachehttp_server1.3.1.1
apache apachehttp_server1.3.2
apache apachehttp_server1.3.3
apache apachehttp_server1.3.4
apache apachehttp_server1.3.5
apache apachehttp_server1.3.6
apache apachehttp_server1.3.7
apache apachehttp_server1.3.8
apache apachehttp_server1.3.9
apache apachehttp_server1.3.10
apache apachehttp_server1.3.11
apache apachehttp_server1.3.12
apache apachehttp_server1.3.13
apache apachehttp_server1.3.14
apache apachehttp_server1.3.15
apache apachehttp_server1.3.16
apache apachehttp_server1.3.17
apache apachehttp_server1.3.18
apache apachehttp_server1.3.19
apache apachehttp_server1.3.20
apache apachehttp_server1.3.22
apache apachehttp_server1.3.23
apache apachehttp_server1.3.24
apache apachehttp_server1.3.25
apache apachehttp_server1.3.26
apache apachehttp_server1.3.27
apache apachehttp_server1.3.28
apache apachehttp_server1.3.29
apache apachehttp_server1.3.30
apache apachehttp_server1.3.31
apache apachehttp_server1.3.32
apache apachehttp_server1.3.33
apache apachehttp_server1.3.34
apache apachehttp_server1.3.35
apache apachehttp_server1.3.36
apache apachehttp_server1.3.37
apache apachehttp_server1.3.38
apache apachehttp_server1.3.39
apache apachehttp_server1.3.41
apache apachehttp_server1.3.42
apache apachehttp_server1.3.65
apache apachehttp_server1.3.68

References

CWEs

CWE-89

Verify integrity in audit chain (admin only). AS-IS.