Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-0935. PoCs published by Red Security TEAM.
AI-analyzed exploit summary The code describes two vulnerabilities in ARYADAD CMS: a blind SQL injection via the PageID parameter and an unrestricted file upload via the FCKeditor component. No executable exploit code is provided.
Description
SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter.
Exploits (1)
exploitdb
WRITEUP
by Red Security TEAM · textwebappsasp
https://www.exploit-db.com/exploits/18405
The code describes two vulnerabilities in ARYADAD CMS: a blind SQL injection via the PageID parameter and an unrestricted file upload via the FCKeditor component. No executable exploit code is provided.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:
ARYADAD CMS
No auth needed
Prerequisites:
access to the target web application
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/72639
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/51627
Exploit exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/18405
Scores
EPSS
0.0109
EPSS Percentile
61.1%
Details
CWE
CWE-89
Status
published
Products (1)
aryadad/aryadad_cms
Published
Jan 29, 2012
Tracked Since
Feb 18, 2026