CVEvulnerability
CVE-2012-5244
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-10-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) return, (2) display, (3) table, or (4) search parameter to functions/suggest.php; (5) the id parameter to functions/widgets.php, (6) the category parameter to functions/print.php; or (7) the name parameter to functions/ajax.php.
Affected configurations
• bananadance banana dance (<= b.2.6)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/88535 osvdb.org
- http://osvdb.org/88536 osvdb.org
- http://osvdb.org/88537 osvdb.org
- http://osvdb.org/88538 osvdb.org
- http://www.exploit-db.com/exploits/23573/ Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80746 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23118 Exploit
- http://osvdb.org/88535 osvdb.org
- http://osvdb.org/88536 osvdb.org
- http://osvdb.org/88537 osvdb.org
- http://osvdb.org/88538 osvdb.org
- http://www.exploit-db.com/exploits/23573/ Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80746 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23118 Exploit