CVE-2012-2908 in Viscacha

Riassunto

di MITRE

Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) bbcodeexample, (2) buttonimage, or (3) bbcodetag parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 21/05/2012
• Divulgazione: 21/05/2012
• Moderazione: accettato
• Voce: VDB-60772
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.01113
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-2908
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-2908
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-2908/