high7.5Public exploit code
CVE-2012-4265
SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Proman Xpress 5.0.1 - Multiple Vulnerabilities2012-05-13 · webapps · php
Impact
SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Itechscripts | Proman Xpress | Version 5.0.1 |