CVE-2012-4240

MEDIUM 6.5CVE-2012-4240 · Published 11/09/2014 · updated 16/06/2026

In short

CVE-2012-4240 is a MEDIUM (CVSS 6.5) vulnerability affecting groupoffice (group-office).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
groupoffice group-office	`≤ 4.0.89`	No fix yet

Description

SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter.

References

archives.neohapsis.com/archives/bugtraq/2012-09/0011.html · Exploit
osvdb.org/85171
exploit-db.com/exploits/21056 · Exploit
reactionpenetrationtesting.co.uk/group-office-sqli.html · Exploit
securityfocus.com/bid/55383
exchange.xforce.ibmcloud.com/vulnerabilities/78253

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free