← back
CVE-2012-6520

CVE-2012-6520

EPSS 1.3%
Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the (1) select_sort or (2) opt_search_select parameters. NOTE: this issue could not be reproduced by third parties.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/36946unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2012-03/0046.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/73980http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txthttp://www.openwall.com/lists/oss-security/2012/04/12/12http://www.openwall.com/lists/oss-security/2012/04/13/4http://www.openwall.com/lists/oss-security/2012/04/15/1http://www.securityfocus.com/bid/52425