SQL Injection Vulnerability in Proman Xpress by Proman Systems
CVE-2012-4265

Currently unrated

Key Information:

Vendor: Itechscripts
Status: Proman Xpress
Vendor: CVE Published:; 13 August 2012

🔔 Create Itechscripts Vulnerability Alert

Badges

👾 Exploit Exists

What is CVE-2012-4265?

An SQL injection vulnerability exists in the category_edit.php file of Proman Xpress 5.0.1. This flaw allows remote attackers to manipulate SQL queries executed by the application through the 'cid' parameter, potentially enabling them to execute arbitrary SQL commands, which can compromise data integrity and security.

References

http://www.vulnerability-lab.com/get_content.php?id=512

x_refsource_MISC

http://www.exploit-db.com/exploits/18872

exploitx_refsource_EXPLOIT-DB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
🟡
Public PoC available
Aug 13, 2012
👾
Exploit known to exist
Aug 13, 2012
Vulnerability published
Aug 13, 2012

CVE-2012-4265 Data

JSON