CVE-2012-2925 SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action.
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simple php agenda | = 2.2.8 | No fix listed |
References
- 18845 exploit
- simplephpagenda-engine-sql-injection(75501) vdb-entry