CVE-2012-5894: SQL Injection
Published Nov 17, 2012
·Updated
SQL injection vulnerability in havapost.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter.
Affected Software
1 affected component
Havalite CMS<=1.1.0
Event History
Nov 17, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5894?
CVE-2012-5894 is considered to be a high severity SQL injection vulnerability.
2
How do I fix CVE-2012-5894?
To fix CVE-2012-5894, update Havalite CMS to a version later than 1.1.0 or implement input validation for the postId parameter.
3
What systems are affected by CVE-2012-5894?
CVE-2012-5894 affects Havalite CMS version 1.1.0 and earlier.
4
Can CVE-2012-5894 be exploited remotely?
Yes, CVE-2012-5894 allows remote attackers to execute arbitrary SQL commands.
5
What additional risks come with CVE-2012-5894?
Exploiting CVE-2012-5894 can lead to unauthorized access to the database and potential data compromise.