CVE-2012-5910 SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter.
MediumCVSS 6.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| b2evolution | = 4.1.3 | No fix listed |
References
- b2evolution.net
- 80671 vdb-entry
- packetstormsecurity.org
- vulnerability-lab.com
- 52783 vdb-entry
- b2evolutioncms-viewfile-sql-injection(74457) vdb-entry