Unscored CVE-2012-4232 EUVD-2012-4176GHSA-qh8w-whmr-r43p

SQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to execute arbitrary SQL commands via the me…

Published Oct 22, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to execute arbitrary SQL commands via the memberloginid cookie.

References

http://jcore.net/news/jcore-ver-10pre2-available-for-testing
https://www.htbridge.com/advisory/HTB23107
56102 vdb-entry
jcore-index-sql-injection(79442) vdb-entry
20121017 Multiple vulnerabilities in jCore mailing-list