NVD

Id
46082  
Name
CVE-2012-4772  
Description
SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the plan_id parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-10-22  
Modified Date
2013-06-04  
Seq
2012-4772  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231229 46082 CVE-2012-4772 20121017 Multiple vulnerabilities in Subrion CMS  View
231230 46082 CVE-2012-4772 http://packetstormsecurity.org/files/117460/Subrion-CMS-2.2.1-XSS-CSRF-SQL-Injection.html  View
231231 46082 CVE-2012-4772 http://www.subrion.com/forums/announcements/934-subrion-2-2-3-open-source-cms-core-available.html  View
231232 46082 CVE-2012-4772 subrioncms-planid-sql-injection(79466)  View
231233 46082 CVE-2012-4772 https://www.htbridge.com/advisory/HTB23113  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29392 JVNDB-2012-005099 Subrion CMS の register/ における SQL インジェクションの脆弱性 Subrion CMS の register/ には、任意の SQL コマンドを実行されることで、SQL インジェクションの脆弱性が存在します。 CVE-2012-4772 58010 CVE-2012-4772 46082 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005099.html 2012-10-22 2012-10-24 View