Simple PHP Agenda CVE-2012-2925 SQL-Injection Vulnerability
BID:73847
Info
Simple PHP Agenda CVE-2012-2925 SQL-Injection Vulnerability
| Bugtraq ID: | 73847 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-2925 |
| Remote: | Yes |
| Local: | No |
| Published: | May 21 2012 12:00AM |
| Updated: | May 21 2012 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Simple PHP Agenda Simple PHP Agenda 2.2.8 |
| Not Vulnerable: | |
Discussion
Simple PHP Agenda CVE-2012-2925 SQL-Injection Vulnerability
Simple PHP Agenda is prone to a sql-injection vulnerability. SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action.
Simple PHP Agenda is prone to a sql-injection vulnerability. SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action.
Exploit / POC
Simple PHP Agenda CVE-2012-2925 SQL-Injection Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Simple PHP Agenda CVE-2012-2925 SQL-Injection Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
References
Simple PHP Agenda CVE-2012-2925 SQL-Injection Vulnerability
References:
References:
- IBM X-Force Exchange Beta (XF)
- PHP Agenda 2.2.8 - SQL Injection Vulnerability (EXPLOIT-DB)