CVE-2012-1124

CRITICAL 9.8CVE-2012-1124 · Published 11/02/2020 · updated 16/06/2026

In short

CVE-2012-1124 is a CRITICAL (CVSS 9.8) vulnerability affecting phxeventmanager (phxeventmanager project).
Chance of exploitation in the next 30 days (EPSS): 4.3%, higher than 91.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phxeventmanager phxeventmanager_project	`= 2.0`	No fix yet

Description

SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.

References

seclists.org/fulldisclosure/2012/Mar/4 · Exploit
sourceforge.net/tracker · Third Party Advisory
exploit-db.com/exploits/18549 · Exploit
openwall.com/lists/oss-security/2012/03/06/10 · Mailing List
openwall.com/lists/oss-security/2012/03/06/2 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free