Lucene search

K
cvelistMitreCVELIST:CVE-2012-4673
HistoryAug 26, 2012 - 1:00 a.m.

CVE-2012-4673

2012-08-2601:00:00
mitre
www.cve.org
2
sql injection
neoinvoice
remote attackers
arbitrary sql commands

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

44.3%

SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute arbitrary SQL commands via vectors involving the sort_col variable in the list_items function, a different vulnerability than CVE-2012-3477.

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

44.3%

Related for CVELIST:CVE-2012-4673