SQL Injection Vulnerabilities in OSClass by OSClass
CVE-2012-5162

Currently unrated

Key Information:

Vendor

Osclass

Status
Osclass
Vendor
CVE Published:
26 September 2012

What is CVE-2012-5162?

OSClass is susceptible to multiple SQL injection vulnerabilities in the oc-admin/ajax/ajax.php file. These flaws allow remote attackers to manipulate SQL queries by exploiting the id parameter during the edit_category_post or enable_category actions in index.php. Successful exploitation enables attackers to execute arbitrary SQL commands, which could lead to unauthorized access, data leakage, or complete control over the database. It's crucial for users of OSClass to upgrade to version 2.3.5 or later to mitigate these risks.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/78964
vdb-entryx_refsource_XF
http://osclass.org/2012/01/16/osclass-2-3-5/
x_refsource_CONFIRM
https://github.com/osclass/OSClass/commit/ff7ef8a97301aaa...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.