VULNERABILITY INTELLIGENCE
CVE-2012-1002
CVSS score10 HIGH
EPSS probability4.48%
CISA KEVNot currently listed
Published2012-02-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.