SecuritySpace - CVE-2012-1665

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2012-1665

Description: Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or (2) remote administrators to execute arbitrary SQL commands via the status parameter to admin/stats_monthly_sales.php or (3) country parameter in a process action to admin/create_account_process.php.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2012-1665
Bugtraq: 20120404 Multiple vulnerabilities in osCmax (Google Search)
http://archives.neohapsis.com/archives/bugtraq/2012-04/0021.html
https://www.htbridge.com/advisory/HTB23081
http://www.osvdb.org/80900
http://www.osvdb.org/80901
http://www.osvdb.org/80902

CVE ID:	CVE-2012-1665
Description:	Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or (2) remote administrators to execute arbitrary SQL commands via the status parameter to admin/stats_monthly_sales.php or (3) country parameter in a process action to admin/create_account_process.php.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1665 Bugtraq: 20120404 Multiple vulnerabilities in osCmax (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-04/0021.html https://www.htbridge.com/advisory/HTB23081 http://www.osvdb.org/80900 http://www.osvdb.org/80901 http://www.osvdb.org/80902