QwikSec

Security Database

CVE

CWE

Training

CVE-2012-3471

Published: Aug 12, 2012

Modified: Sep 16, 2024

PUBLISHED

Description

Multiple SQL injection vulnerabilities in the edit functions in (1) application/controllers/admin/reports.php and (2) application/controllers/members/reports.php in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via an incident id.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20120809 Re: CVE request for Ushahidi

mailing-list

x_refsource_MLIST

https://github.com/ushahidi/Ushahidi_Web/commit/3f14fa0

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.