Unscored CVE-2012-4570 EUVD-2012-4498GHSA-33wx-mh64-x7f5

SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execu…

Published Oct 23, 2017 · Updated Aug 6, 2024 · Assigned by redhat

Package: php-letodms-core Ecosystem: Debian

Description

SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 12	php-letodms-core	3.3.8-1	—

References

[oss-security] 20121005 CVE request: LetoDMS, more issues mailing-list
[oss-security] 20121031 CVE request: LetoDMS, more issues mailing-list
55822 vdb-entry
http://sourceforge.net/p/mydms/code/HEAD/tree/trunk/CHANGELOG