Description

Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) edit_category_post or (2) enable_category action to index.php.

Remediation

References

CVE-2012-5162

Related Vulnerabilities

WordPress Plugin Async JavaScript Security Bypass (2.19.07.14)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-2889)

MySQL CVE-2015-0499 Vulnerability (CVE-2015-0499)

WordPress Plugin VKontakte API Cross-Site Scripting (2.7)

WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Multiple Unspecified Vulnerabilities (1.7.3)

Severity

Medium

Classification

CVE-2012-5162 CWE-138

Tags

Missing Update Known Vulnerabilities