NetSight
IP …
high7.5Public exploit code

CVE-2012-6626

SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field.

Affected products

VendorProductAffected versions
Brian CabunacBrowser To Email Phone Message System
Version 1.0

Weakness classification

CWE-89

References