Unscored severity · published May 21, 2012
CVE-2012-2923
SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Elearning Server · Hypermethod
4g · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2923
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2923
osvdb.org
http://osvdb.org/81830
secunia.com
http://secunia.com/advisories/49126
www.exploit-db.com
http://www.exploit-db.com/exploits/18858
Exploit
http://www.securityfocus.com/bid/53472
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/75513
More from Elearning Server
–
CVE-2012-2924
PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path…