CyberSec.Space Logo
Back to CVE Browser

CVE-2012-1002

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0530%
EPSS Percentile17.60th
PublishedFeb 8, 2012
Last ModifiedApr 29, 2026

Vulnerability Description

SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

Affected Platforms (CPE)

📦
Zakongroup

Openconf

= 4.00
📦
Zakongroup

Openconf

= 4.01
📦
Zakongroup

Openconf

= 4.02
📦
Zakongroup

Openconf

= 4.10
📦
Zakongroup

Openconf

= 4.11

References & Advisories

🔗 http://www.exploit-db.com/exploits/18820
🔗 http://www.openconf.com/news/#20120202
🔗 http://www.securityfocus.com/bid/51927
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/75399
🔗 http://www.exploit-db.com/exploits/18820
🔗 http://www.openconf.com/news/#20120202
🔗 http://www.securityfocus.com/bid/51927
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/75399

Related Vulnerabilities

CVE-2005-04074.3

Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inj...

CVE-2012-280010.0

Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11, and Libav 0....

CVE-2012-280110.0

Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unkn...

CVE-2012-280210.0

Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8...