CVE-2012-2105

HOCH 7.5CVE-2012-2105 · Published 19/09/2012 · updated 16/06/2026

Kurz gesagt

CVE-2012-2105 ist eine Schwachstelle (HOCH (CVSS 7.5)) in timesheet next gen (peter kovacs).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.9%, höher als bei 80.1% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
timesheet next gen peter_kovacs	`= 1.5.2`	No fix yet

Description

Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.

References

archives.neohapsis.com/archives/bugtraq/2012-03/0011.html · Exploit
secunia.com/advisories/48239 · Vendor Advisory
sourceforge.net/apps/mantisbt/tsheetx/view.php
exploit-db.com/exploits/18554 · Exploit
openwall.com/lists/oss-security/2012/04/16/4
openwall.com/lists/oss-security/2012/04/16/7
osvdb.org/79804
securityfocus.com/bid/52270 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/73680

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free