CVE-2012-5291

EPSS 1.1%

SQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to execute arbitrary SQL commands via the idteam parameter.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/18320unverified exploitdbwww.exploit-db.com/exploits/18320unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/72135 http://www.exploit-db.com/exploits/18320 http://www.osvdb.org/82483 http://www.securityfocus.com/bid/51299