CVE-2012-1002

OpenConf < 4.12 - SQL Injection via Author Edit PID Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-1002. PoCs published by EgiX.

AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in OpenConf <= 4.11 via the 'pid' parameter in author/edit.php. It extracts the chair's password hash and username by leveraging time-based SQLi techniques.

Description

SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by EgiX · phpwebappsphp
https://www.exploit-db.com/exploits/18820

This exploit demonstrates a blind SQL injection vulnerability in OpenConf <= 4.11 via the 'pid' parameter in author/edit.php. It extracts the chair's password hash and username by leveraging time-based SQLi techniques.

Classification
Working Poc 100%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: OpenConf <= 4.11
No auth needed
Prerequisites: OpenConf installation with at least one record in the 'paper' table · Edit Submission feature enabled
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75399
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/51927
Various Sources x_refsource_confirm
http://www.openconf.com/news/#20120202
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/18820

Scores

EPSS 0.0474
EPSS Percentile 90.7%

Details

Status published
Products (5)
zakongroup/openconf 4.00
zakongroup/openconf 4.01
zakongroup/openconf 4.02
zakongroup/openconf 4.10
zakongroup/openconf 4.11
Published Feb 08, 2012
Tracked Since Feb 18, 2026