Description

SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter.

Remediation

References

CVE-2012-5910

Related Vulnerabilities

WordPress Plugin MailPoet Newsletters (Previous) Multiple Vulnerabilities (2.7.2)

phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-6617)

WordPress Plugin Download Plugins and Themes from Dashboard Cross-Site Scripting (1.5.0)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.4)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2001-1247)

Severity

Medium

Classification

CVE-2012-5910 CWE-138

Tags

Missing Update Known Vulnerabilities