CVE-2012-6507
Multiple SQL injection vulnerabilities in admin.php in ChurchCMS 0.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameters in a login action.
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jason_sexauer:churchcms
References
- http://archives.neohapsis.com/archives/bugtraq/2012-04/0178.html
- http://packetstormsecurity.org/files/112106/ChurchCMS-0.0.1-SQL-Injection.html
- http://www.securityfocus.com/bid/53209
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75110
- http://archives.neohapsis.com/archives/bugtraq/2012-04/0178.html