CVE-2012-4265

CVE-2012-4265 describes an SQL injection vulnerability in the PHP script category_edit.php of Proman Xpress 5.0.1. The flaw allows remote attackers to execute arbitrary SQL commands through the cid parameter. This is documented across multiple sources (NVD/Red Hat/CVE list) with the same affected...