CVE-2012-1911
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.2%
from disclosure to weaponsame day
Published on NVDSep 9
1st PoCMar 10
Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter to vcard.php. NOTE: the edit.php vector is already covered by CVE-2008-2565.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/18578unverifiedcve_referencewww.exploit-db.com/exploits/18578unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/73943http://sourceforge.net/tracker/?func=detail&aid=3496653&group_id=157964&atid=805929http://sourceforge.net/tracker/?func=detail&aid=3501716&group_id=157964&atid=805929http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txthttp://www.exploit-db.com/exploits/18578http://www.securityfocus.com/bid/52396