NVD

Id
43954  
Name
CVE-2012-2105  
Description
Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-09-19  
Modified Date
2012-09-21  
Seq
2012-2105  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220808 43954 CVE-2012-2105 20120302 Timesheet Next Gen 1.5.2 Multiple SQLi  View
220809 43954 CVE-2012-2105 http://sourceforge.net/apps/mantisbt/tsheetx/view.php?id=122  View
220810 43954 CVE-2012-2105 18554  View
220811 43954 CVE-2012-2105 [oss-security] 20120416 CVE-request: Timesheet Next Gen 1.5.2 Multiple SQLi  View
220812 43954 CVE-2012-2105 [oss-security] 20120416 Re: CVE-request: Timesheet Next Gen 1.5.2 Multiple SQLi  View
220813 43954 CVE-2012-2105 52270  View
220814 43954 CVE-2012-2105 timesheetnextgen-login-sql-injection(73680)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28772 JVNDB-2012-004479 Timesheet Next Gen の login.php における SQL インジェクションの脆弱性 Timesheet Next Gen の login.php には、SQL インジェクションの脆弱性が存在します。 CVE-2012-2105 55343 CVE-2012-2105 43954 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004479.html 2012-09-19 2012-09-21 View