CVE-2012-3469

HIGH 7.5CVE-2012-3469 · Published 12/08/2012 · updated 16/06/2026

In short

CVE-2012-3469 is a HIGH (CVSS 7.5) vulnerability affecting ushahidi platform (ushahidi).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ushahidi platform ushahidi	`= 1.0= 1.2= 2.0= 2.1= 2.2= 2.2.1= 2.3.1= 2.3.2= 2.4≤ 2.4.1`	No fix yet

Description

Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the messages admin functionality in application/controllers/admin/messages.php, (2) application/libraries/api/MY_Checkin_Api_Object.php, (3) application/controllers/admin/messages/reporters.php, or (4) the location API in application/libraries/api/MY_Locations_Api_Object.php and application/models/location.php.

References

openwall.com/lists/oss-security/2012/08/09/5
ushahidi/Ushahidi_Web commit 68d9916 · Exploit
ushahidi/Ushahidi_Web commit 6f6a919 · Exploit
ushahidi/Ushahidi_Web commit a11d43c · Exploit
ushahidi/Ushahidi_Web commit e0e2b66 · Exploit

More vulnerabilities in ushahidi platform

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ushahidi platform

ushahidi

= 1.0= 1.2= 2.0= 2.1= 2.2= 2.2.1= 2.3.1= 2.3.2= 2.4≤ 2.4.1

No fix yet

Description

More vulnerabilities in ushahidi platform

See all →