CVE-2012-5162

🗓️ 26 Sep 2012 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 61 Views🌐 WEB

Multiple SQL injection in OSClass before 2.3.5 (CVE-2012-5162

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2012-5162	26 Sep 201200:00	–	cvelist
EUVD	EUVD-2012-5085	7 Oct 202500:30	–	euvd
Mend	CVE-2012-5162	26 Sep 201200:00	–	mend
NVD	CVE-2012-5162	26 Sep 201200:55	–	nvd
OpenVAS	OSClass < 2.3.5 Multiple Vulnerabilities - Active Check	27 Sep 201200:00	–	openvas
Prion	Sql injection	26 Sep 201200:55	–	prion
Positive Technologies	PT-2012-5811	26 Sep 201200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2012-5162: Improper Neutralization of Special Elements used in an SQL Command	26 Sep 201200:00	–	rapid7

NVD

Node

osclass osclassRange≤2.3.4

Source	Link
secunia	www.secunia.com/advisories/47697
codseq	www.codseq.it/advisories/multiple_vulnerabilities_in_osclass
github	www.github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f
osclass	www.osclass.org/2012/01/16/osclass-2-3-5/
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/78964

Parameter	Position	Path	Description	CWE
id	query param	/oc-admin/ajax/ajax.php	SQL injection in the id parameter when performing the edit_category_post action.	CWE-89
id	query param	/oc-admin/ajax/ajax.php	SQL injection in the id parameter when performing the enable_category action.	CWE-89

16 Jun 2026 23:46Current

8.8High risk

Vulners AI Score8.8

CVSS 26.5

EPSS0.0104

sql injection osclass security vulnerability cve-2012-5162 nvd