CVE-2012-5000 SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blueteck witze addon | = 0.9 | No fix listed |
References
- 48233 third-party-advisory vendor-advisory
- 18558 exploit
- 79807 vdb-entry
- 52286 exploit vdb-entry
- devilzclanportalwitze-index-sql-injection(73681) vdb-entry