Lucene search
HistoryOct 22, 2012 - 11:55 p.m.
CVE-2012-5453
cve-2012-5453
sql injection
atutor acontent
vulnerability
remote authenticated users
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.7%
SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arbitrary SQL commands via the field parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-5167.
Affected configurations
Node
atutoracontentMatch1.21
| CPE | Name | Operator | Version |
|---|---|---|---|
| atutor:acontent | atutor acontent | eq | 1.2 |
Related
cvelist
cvelist
CVE-2012-5453
2012-10-22 23:00:00
CVE-2012-5167
2012-10-22 23:00:00
prion
prion
Sql injection
2012-10-22 23:55:00
Sql injection
2012-10-22 23:55:00
nvd
nvd
CVE-2012-5453
2012-10-22 23:55:10
CVE-2012-5167
2012-10-22 23:55:09
cve
cve
CVE-2012-5167
2012-10-22 23:55:09
htbridge
htbridge
Multiple vulnerabilities in AContent
2012-09-26 00:00:00
securityvulns
securityvulns
Multiple vulnerabilities in AContent
2012-10-22 00:00:00
packetstorm
packetstorm
ATutor AContent 1.2 XSS / Authentication / SQL Injection
2012-10-18 00:00:00
exploitpack
exploitpack
ATutor 1.2 - Multiple Vulnerabilities
2012-10-22 00:00:00
exploitdb
exploitdb
ATutor 1.2 - Multiple Vulnerabilities
2012-10-22 00:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.7%
Related for CVE-2012-5453