CVE-2012-3477

SQL injection vulnerability in signup_check.php in NeoInvoice allows remote attackers to execute arbitrary SQL commands via the value parameter in a username action.

Score

CVSS 2.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2012-08-26

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Neoinvoice (Thomas Hunter)

References

• http://adamcaudill.com/2012/08/12/neoinvoice-blind-sql-injection-cve-2012-3477/
• http://archives.neohapsis.com/archives/bugtraq/2012-08/0087.html