CVE-2012-4055

Description

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/75288 ↗
• http://www.securityfocus.com/bid/53295 ↗
• http://packetstormsecurity.org/files/112287/Uiga-FanClub-SQL-Injection.html ↗