high7.5Public exploit code
CVE-2012-2925
SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Agenda 2.2.8 - SQL Injection2012-05-07 · webapps · php · Verified
Impact
SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple Php Agenda | Simple Php Agenda | Version 2.2.8 |