[CVE-2012-1002] OpenConf <= 4.11 (author/edit.php) Blind SQL Injection Vulnerability

-------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Blind SQL Injection Vulnerability -------------------------------------------------------------------- author...............: Egidio Romano aka EgiX mail.................: n0b0d13satgmaildotcom...

CVE-2012-1002: Undefined Security Weakness

SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

PT-2012-3006

Name of the Vulnerable Software and Affected Versions OpenConf versions prior to 4.12 Description The issue allows remote attackers to execute arbitrary SQL commands via the pid parameter in the author/edit.php file. Recommendations For versions prior to 4.12, update to version 4.12 or later to...