CVE-2012-1670 admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action.
MediumCVSS 5.0
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpgradebook php grade book | <= 1.9.4 | No fix listed |
| phpgradebook php grade book | = 1.9.3 | No fix listed |
References
- 20120322 'PHP Grade Book' Unauthenticated SQL Database Export (CVE-2012-1670) mailing-list
- downloads.sourceforge.net patch
- 80311 vdb-entry
- 48524 third-party-advisory
- 18647 exploit
- 52686 vdb-entry
- phpgradebook-info-disclosure(74292) vdb-entry