CVEvulnerability

CVE-2011-5235

7.5 HIGH Published 2012-10-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-10-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-89

Description

SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link.

Affected configurations

• mnogosearch mnogosearch (<= 3.3.11) • mnogosearch mnogosearch 3.1.19 • mnogosearch mnogosearch 3.1.20 • mnogosearch mnogosearch 3.2.10 • mnogosearch mnogosearch 3.2.13 • mnogosearch mnogosearch 3.2.14 • mnogosearch mnogosearch 3.2.15 • mnogosearch mnogosearch 3.2.16 • mnogosearch mnogosearch 3.2.17 • mnogosearch mnogosearch 3.2.18 • mnogosearch mnogosearch 3.2.19 • mnogosearch mnogosearch 3.2.20 • mnogosearch mnogosearch 3.2.21 • mnogosearch mnogosearch 3.2.22 • mnogosearch mnogosearch 3.2.23 • mnogosearch mnogosearch 3.2.24 • mnogosearch mnogosearch 3.2.25 • mnogosearch mnogosearch 3.2.26 • mnogosearch mnogosearch 3.2.42 • mnogosearch mnogosearch 3.3.0 • mnogosearch mnogosearch 3.3.1 • mnogosearch mnogosearch 3.3.2 • mnogosearch mnogosearch 3.3.3 • mnogosearch mnogosearch 3.3.4 • mnogosearch mnogosearch 3.3.5 • mnogosearch mnogosearch 3.3.6 • mnogosearch mnogosearch 3.3.7 • mnogosearch mnogosearch 3.3.8 • mnogosearch mnogosearch 3.3.9 • mnogosearch mnogosearch 3.3.10

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References