Description
Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) 95.php, (2) view.php, or (3) rtg.php.
References (2)
Core 2
Core References
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/07/09/2
Issue Tracking x_refsource_misc
https://code.google.com/p/rtg2/issues/detail?id=35
Scores
EPSS
0.0113
EPSS Percentile
63.1%
Details
CWE
CWE-89
Status
published
Products (2)
adrian_chadd/rtg
0.7.4
adrian_chadd/rtg2
0.9.2
Published
Jul 12, 2012
Tracked Since
Feb 18, 2026