CVE-2012-5000

Witze addon 0.9 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.

Exploits (1)

exploitdb WORKING POC

by Easy Laster · textwebappsphp

https://www.exploit-db.com/exploits/18558

View Code ZIP pw:eip

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/73681

Exploit exploit x_refsource_exploit-db

http://www.exploit-db.com/exploits/18558

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/52286

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/48233

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/79807

Scores

EPSS 0.0138

EPSS Percentile 80.4%

Details

CWE

CWE-89

Status published

Products (1)

blueteck/witze_addon 0.9

Published Sep 19, 2012

Tracked Since Feb 18, 2026