CVE-2012-2908 Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) bbcodeexample, (2) buttonimage, or (3) bbcodetag pa...
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) bbcodeexample, (2) buttonimage, or (3) bbcodetag parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| viscacha | = 0.8.1.1 | No fix listed |
References
- 18873 exploit
- 53496 exploit vdb-entry
- www.vulnerability-lab.com exploit
- viscacha-bbcodes-sql-injection(75575) vdb-entry