SQL Injection Vulnerability in pGB 2.12 from pGB Software
CVE-2012-6524
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2012-6524?
The vulnerability present in pGB version 2.12 arises from an SQL injection flaw in the kommentar.php script. This issue enables remote attackers to exploit the application by providing manipulated input through the 'id' parameter, allowing them to execute arbitrary SQL queries against the underlying database. Successful exploitation can lead to unauthorized data access, data modification, or potentially complete compromise of the application.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.