Description
Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) page.php or (2) single.php.
Exploits (1)
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/80668
Exploit exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/18670
Exploit x_refsource_misc
http://packetstormsecurity.org/files/111274/PicoPublisher-2.0-SQL-Injection.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/74402
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/80667
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/52808
Scores
EPSS
0.0106
EPSS Percentile
77.9%
Details
CWE
CWE-89
Status
published
Products (1)
pico/picopublisher
2.0
Published
Nov 17, 2012
Tracked Since
Feb 18, 2026