PT-2012-5057

Name of the Vulnerable Software and Affected Versions RTG version 0.7.4 RTG2 version 0.9.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by exploiting SQL injection vulnerabilities via unspecified parameters to API endpoints such as "95.php"...

CVE-2012-3881: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 95.php, 2 view.php, or 3 rtg.php...