CVE-2012-2956

MEDIO 6.5CVE-2012-2956 · Published 17/09/2014 · updated 16/06/2026

En resumen

CVE-2012-2956 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a spiceworks (spiceworks).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 65.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
spiceworks spiceworks	`= 5.3.75941`	No fix yet

Description

SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to api_v2.json. NOTE: this entry was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6658 is for the XSS.

References

osvdb.org/84113
exploit-db.com/exploits/20063 · Exploit
securityfocus.com/bid/54647 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/77174

Más vulnerabilidades de spiceworks

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

spiceworks

= 5.3.75941

No fix yet

Más vulnerabilidades de spiceworks

Ver todo →