medium6.5Public exploit code
CVE-2012-2236
SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Gift Registry 1.5.5 - SQL Injection2012-02-24 · webapps · php
Impact
SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ryan Walberg | Php Gift Registry | Version 1.5.5 |