CVE-2012-3791

State: Published
Severity: Not scored
Published: Jun 21, 2012
Updated: Aug 6, 2024
Reserved: Jun 21, 2012

Description

Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) item_delete.php, (2) item_status.php, (3) item_detail.php, (4) item_modify.php, or (5) item_position.php in admin/; or (6) status parameter to admin/item_status.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

53749vdb-entry
82414vdb-entry
18955exploit
82412vdb-entry
82413vdb-entry
swcms-multiple-sql-injection(75999)vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.