CVE-2012-4265

2012-08-1322:00:00

mitre

www.cve.org

sql injection

proman xpress

remote attackers

arbitrary sql commands

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

47.9%

JSON

SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

References

www.exploit-db.com/exploits/18872

www.vulnerability-lab.com/get_content.php?id=512