CVE-2012-1002

OpenConf <4.12 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by EgiX · phpwebappsphp

https://www.exploit-db.com/exploits/18820

View Code ZIP pw:eip

References (4)

[Various Sources] http://www.openconf.com/news/#20120202

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/75399

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/51927

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/18820

Scores

EPSS 0.0238

EPSS Percentile 85.1%

Details

Status published

Products (5)

zakongroup/openconf 4.00

zakongroup/openconf 4.01

zakongroup/openconf 4.02

zakongroup/openconf 4.10

zakongroup/openconf 4.11

Published Feb 08, 2012

Tracked Since Feb 18, 2026