SQL Injection Vulnerability in Proman Xpress by Proman Systems
CVE-2012-4265

Currently unrated

Key Information:

Vendor: Itechscripts
Status: Proman Xpress
Vendor: CVE Published:; 13 August 2012

🔔 Create Itechscripts Vulnerability Alert

What is CVE-2012-4265?

An SQL injection vulnerability exists in the category_edit.php file of Proman Xpress 5.0.1. This flaw allows remote attackers to manipulate SQL queries executed by the application through the 'cid' parameter, potentially enabling them to execute arbitrary SQL commands, which can compromise data integrity and security.

References

http://www.vulnerability-lab.com/get_content.php?id=512

x_refsource_MISC

http://www.exploit-db.com/exploits/18872

exploitx_refsource_EXPLOIT-DB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Aug 13, 2012