CVE-2012-5244 | BDVDB-2026-65466 Detail

Description#

Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) return, (2) display, (3) table, or (4) search parameter to functions/suggest.php; (5) the id parameter to functions/widgets.php, (6) the category parameter to functions/print.php; or (7) the name parameter to functions/ajax.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.exploit-db.com/exploits/23573/
http://osvdb.org/88537
https://exchange.xforce.ibmcloud.com/vulnerabilities/80746
http://osvdb.org/88536
http://osvdb.org/88535
https://www.htbridge.com/advisory/HTB23118
http://osvdb.org/88538

Exploit#

http://www.exploit-db.com/exploits/23573/

History#

Version 12014-10-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.