Unscored severity · published Nov 15, 2012
CVE-2012-4951
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the (1) TerminalId, (2) ModelName, or (3) ApplicationName parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VW
Vericentre Web Console · Verifone
through 2.2; 2.0; 2.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4951
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4951
Exploit
http://www.clearskies.net/documents/css-advisory-css1211-vericentre.pdf
US Government Resource
http://www.kb.cert.org/vuls/id/180091
www.securityfocus.com
http://www.securityfocus.com/bid/56409
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/79832