NVD

Id
46447  
Name
CVE-2012-5244  
Description
Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) return, (2) display, (3) table, or (4) search parameter to functions/suggest.php; (5) the id parameter to functions/widgets.php, (6) the category parameter to functions/print.php; or (7) the name parameter to functions/ajax.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-20  
Modified Date
2014-10-22  
Seq
2012-5244  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
232851 46447 CVE-2012-5244 23573  View
232852 46447 CVE-2012-5244 banana-dance-ajax-sql-injection(80746)  View
232853 46447 CVE-2012-5244 https://www.htbridge.com/advisory/HTB23118  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30602 JVNDB-2012-006310 Banana Dance におけるSQL インジェクションの脆弱性 Banana Dance には、SQL インジェクションの脆弱性が存在します。 CVE-2012-5244 58482 CVE-2012-5244 46447 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006310.html 2012-12-19 2014-10-27 View