CVE-2012-1218 in freelancerKit

Riassunto

di MITRE

Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to the (1) notes and (2) tickets components.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 20/02/2012
• Divulgazione: 21/02/2012
• Moderazione: accettato
• Voce: VDB-60270
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01223
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-1218
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-1218
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-1218/