high7.5Public exploit code
CVE-2012-2923
SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eLearning server 4g - Multiple Vulnerabilities2012-05-10 · webapps · php
Impact
SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hypermethod | Elearning Server | Version 4g |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/81830
- http://secunia.com/advisories/49126
- http://www.exploit-db.com/exploits/18858
- http://www.securityfocus.com/bid/53472
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75513
- http://osvdb.org/81830
- http://secunia.com/advisories/49126
- http://www.exploit-db.com/exploits/18858
- http://www.securityfocus.com/bid/53472
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75513