CVE-2012-2105

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Timesheet Next Gen 1.5.2 - Multiple SQL Injections2012-03-03 · webapps · php

Impact

Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://archives.neohapsis.com/archives/bugtraq/2012-03/0011.html
• http://secunia.com/advisories/48239
• http://sourceforge.net/apps/mantisbt/tsheetx/view.php?id=122
• http://www.exploit-db.com/exploits/18554
• http://www.openwall.com/lists/oss-security/2012/04/16/4
• http://www.openwall.com/lists/oss-security/2012/04/16/7
• http://www.osvdb.org/79804
• http://www.securityfocus.com/bid/52270
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73680
• http://archives.neohapsis.com/archives/bugtraq/2012-03/0011.html
• http://secunia.com/advisories/48239
• http://sourceforge.net/apps/mantisbt/tsheetx/view.php?id=122
• http://www.exploit-db.com/exploits/18554
• http://www.openwall.com/lists/oss-security/2012/04/16/4
• http://www.openwall.com/lists/oss-security/2012/04/16/7
• http://www.osvdb.org/79804
• http://www.securityfocus.com/bid/52270
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73680