critical9.8
CVE-2012-5872
ARC (aka ARC2) through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2_StoreSelectQueryHandler.php via comments in a SPARQL WHERE clause.
Impact
ARC (aka ARC2) through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2_StoreSelectQueryHandler.php via comments in a SPARQL WHERE clause.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arc2 Project | Arc2 | through 2011-12-01 |