← Back

CVE-2012-1002

nvd nist
Published: Feb 8, 2012Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

Affected (5)

Products: Zakongroup: Openconf
1 product
Openconf
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Zakongroup
Version 4.00
Version 4.01
Version 4.02
Version 4.10
Version 4.11

References (8)

Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.