CVE-2012-4772

2012-10-2223:55:08

CWE-89

[email protected]

web.nvd.nist.gov

cve-2012-4772

sql injection

subrion cms

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.006

Percentile

78.7%

JSON

SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the plan_id parameter.

Affected configurations

NVD

Node

intelliantssubrion_cmsRange≤2.2.2

intelliantssubrion_cmsMatch2.0.4

intelliantssubrion_cmsMatch2.2.0

intelliantssubrion_cmsMatch2.2.1

VendorProductVersionCPE
intelliantssubrion_cmscpe:/a:intelliants:subrion_cms::::
intelliantssubrion_cms2.2.0cpe:/a:intelliants:subrion_cms:2.2.0:::
intelliantssubrion_cms2.0.4cpe:/a:intelliants:subrion_cms:2.0.4:::
intelliantssubrion_cms2.2.1cpe:/a:intelliants:subrion_cms:2.2.1:::

Vendor	Product	Version	CPE
intelliants	subrion_cms		cpe:/a:intelliants:subrion_cms::::
intelliants	subrion_cms	2.2.0	cpe:/a:intelliants:subrion_cms:2.2.0:::
intelliants	subrion_cms	2.0.4	cpe:/a:intelliants:subrion_cms:2.0.4:::
intelliants	subrion_cms	2.2.1	cpe:/a:intelliants:subrion_cms:2.2.1:::