Description

Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) edit_category_post or (2) enable_category action to index.php.

Remediation

References

CVE-2012-5162

Related Vulnerabilities

WordPress Plugin Membership & Content Restriction-Paid Member Subscriptions Multiple Vulnerabilities (2.4.1)

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.16)

Ruby Resource Management Errors Vulnerability (CVE-2008-2664)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8625)

Varnish Cache Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-8807)

Severity

Medium

Classification

CVE-2012-5162 CWE-138

Tags

Missing Update Known Vulnerabilities