CVE-2012-6507

2013-01-2401:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

51.0%

JSON

Multiple SQL injection vulnerabilities in admin.php in ChurchCMS 0.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameters in a login action.

References

archives.neohapsis.com/archives/bugtraq/2012-04/0178.html

packetstormsecurity.org/files/112106/ChurchCMS-0.0.1-SQL-Injection.html

www.securityfocus.com/bid/53209

exchange.xforce.ibmcloud.com/vulnerabilities/75110