Vulnerability Details CVE-2012-1002
SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.05
EPSS Ranking 89.1%
CVSS Severity
CVSS v2 Score 10.0
References
- http://www.exploit-db.com/exploits/18820
- http://www.openconf.com/news/#20120202
- http://www.securityfocus.com/bid/51927
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75399
- http://www.exploit-db.com/exploits/18820
- http://www.openconf.com/news/#20120202
- http://www.securityfocus.com/bid/51927
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75399
Products affected by CVE-2012-1002
-
cpe:2.3:a:zakongroup:openconf:4.00
-
cpe:2.3:a:zakongroup:openconf:4.01
-
cpe:2.3:a:zakongroup:openconf:4.02
-
cpe:2.3:a:zakongroup:openconf:4.10
-
cpe:2.3:a:zakongroup:openconf:4.11