CVE-2012-5910: SQL Injection
Published Nov 17, 2012
·Updated
SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter.
Affected Software
1 affected component
b2evolution b2evolution=4.1.3
Event History
Nov 17, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5910?
CVE-2012-5910 has a high severity rating due to the potential for remote authenticated users to execute arbitrary SQL commands.
2
How do I fix CVE-2012-5910?
To fix CVE-2012-5910, upgrade to b2evolution version 4.1.4 or later.
3
Who is affected by CVE-2012-5910?
CVE-2012-5910 affects users of b2evolution version 4.1.3.
4
What is the nature of the vulnerability in CVE-2012-5910?
CVE-2012-5910 is an SQL injection vulnerability that allows remote authenticated users to manipulate the database.
5
What are the potential impacts of CVE-2012-5910?
The potential impacts of CVE-2012-5910 include unauthorized access to sensitive data and data corruption through arbitrary SQL execution.