CVE-2012-3469

Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to 1 the messages admin functionality in application/controllers/admin/messages.php, 2 application/libraries/api/MYCheckinApiObject.php, 3...