QwikSec

Security Database

CVE

CWE

Training

CVE-2012-6520

Published: Jan 24, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the (1) select_sort or (2) opt_search_select parameters. NOTE: this issue could not be reproduced by third parties.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

wikidforum-selectsort-sql-injection(73980)

vdb-entry

x_refsource_XF

[oss-security] 20120413 Re: CVE-request: Wikidforum 2.10 multiple XSS and SQL-injection vulnerabilities SSCHADV2012-005

mailing-list

x_refsource_MLIST

20120310 Wikidforum 2.10 Multiple security vulnerabilities

mailing-list

x_refsource_BUGTRAQ

http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt

x_refsource_MISC

[oss-security] 20120412 Re: CVE-request: Wikidforum 2.10 multiple XSS and SQL-injection vulnerabilities SSCHADV2012-005

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_BID

[oss-security] 20120415 Re: CVE-request: Wikidforum 2.10 multiple XSS and SQL-injection vulnerabilities SSCHADV2012-005

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.