CVE-2012-0811: SQL Injection
Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt function, when mysqlencrypt is configured, or (2) unspecified vectors that are used in backup files generated by backup.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0811?
CVE-2012-0811 is considered to have a high severity due to its potential for remote authenticated SQL injection vulnerabilities.
How do I fix CVE-2012-0811?
To fix CVE-2012-0811, you should upgrade Postfix Admin to version 2.3.5 or later, which addresses the SQL injection vulnerabilities.
Who is affected by CVE-2012-0811?
CVE-2012-0811 affects all versions of Postfix Admin prior to 2.3.5 that are used in environments configured with mysql_encrypt.
What types of vulnerabilities are present in CVE-2012-0811?
CVE-2012-0811 contains multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands.
Can CVE-2012-0811 be exploited remotely?
Yes, CVE-2012-0811 can be exploited remotely by authenticated users who leverage SQL injection techniques.