CVE-2012-1124 SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.
CriticalCVSS 9.8
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phxEventManager | = 2.0 beta 5 | No fix listed |
| phxeventmanager project phxeventmanager | = 2.0-beta5 | No fix listed |
References
- sourceforge.net third-party-advisory
- seclists.org exploit mailing-list third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- www.exploit-db.com exploit third-party-advisory vdb-entry
- www.openwall.com mailing-list third-party-advisory