CVE-2012-2925

Description

SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://www.exploit-db.com/exploits/18845
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75501
• http://www.exploit-db.com/exploits/18845
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75501

CWEs

CWE-89