SQL Injection Vulnerability in OpenConf 4.x before 4.12 in author/edit.php

CVE-2012-1002 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

Learn more about our Web Application Penetration Testing UK.