CVE-2012-5701
dotproject < 2.1.7 - Authenticated SQL Injection via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-5701. PoCs published by High-Tech Bridge.
AI-analyzed exploit summary The exploit demonstrates multiple SQL injection vulnerabilities in Dotproject versions prior to 2.1.7. It includes URLs with crafted SQL queries that leverage UNION-based injection to write data to files, potentially leading to data exfiltration or further exploitation.
Description
Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search_string or (2) where parameter in a contacts action, (3) dept_id parameter in a departments action, (4) project_id[] parameter in a project action, or (5) company_id parameter in a system action to index.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.
Exploits (1)
The exploit demonstrates multiple SQL injection vulnerabilities in Dotproject versions prior to 2.1.7. It includes URLs with crafted SQL queries that leverage UNION-based injection to write data to files, potentially leading to data exfiltration or further exploitation.