CVE-2012-3470

HIGH 7.5CVE-2012-3470 · Published 12/08/2012 · updated 16/06/2026

In short

CVE-2012-3470 is a HIGH (CVSS 7.5) vulnerability affecting ushahidi platform (ushahidi).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ushahidi platform ushahidi	`= 1.0= 1.2= 2.0= 2.1= 2.2= 2.2.1= 2.3.1= 2.3.2= 2.4≤ 2.4.1`	No fix yet

Description

Multiple SQL injection vulnerabilities in application/libraries/api/MY_Countries_Api_Object.php in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to _get_countries functions.

References

openwall.com/lists/oss-security/2012/08/09/5
ushahidi/Ushahidi_Web commit 3301e48 · Exploit

More vulnerabilities in ushahidi platform

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free