Lucene search
K

CVE-2012-6290

🗓️ 11 Mar 2014 15:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 43 Views🌐 WEB

SQL injection vuln in ImageCMS before 4.2 allows remote authenticated admins to execute arbitrary SQL commands via the q parameter to admin/admin_search/

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
0day.today
ImageCMS 4.0.0b SQL injection/ CSRF Vulnerabilities
25 Jan 201300:00
zdt
Cvelist
CVE-2012-6290
11 Mar 201415:00
cvelist
Exploit DB
ImageCMS 4.0.0b - Multiple Vulnerabilities
25 Jan 201300:00
exploitdb
EUVD
EUVD-2012-6145
7 Oct 202500:30
euvd
exploitpack
ImageCMS 4.0.0b - Multiple Vulnerabilities
25 Jan 201300:00
exploitpack
htbridge
SQL Injection Vulnerability in ImageCMS
5 Dec 201200:00
htbridge
NVD
CVE-2012-6290
11 Mar 201419:37
nvd
Packet Storm
ImageCMS 4.0.0b SQL Injection
24 Jan 201300:00
packetstorm
Prion
Sql injection
11 Mar 201419:37
prion
Prion
Cross site request forgery (csrf)
11 Mar 201416:17
prion
Rows per page
NVD
Node
imagecmsimagecmsRange4.0.0b
ParameterPositionPathDescriptionCWE
qquery paramadmin/admin_search/SQL injection via q parameter in admin_search endpoint (CWE-89).CWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

06 May 2026 22:30Current
8.1High risk
Vulners AI Score8.1
CVSS 26.5
EPSS0.01602
43