Executive Summary

Informations
Name	CVE-2012-2951	First vendor Publication	2012-05-29
Vendor	Cve	Last vendor Modification	2012-05-30

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

SQL injection vulnerability in plog-rss.php in Plogger allows remote attackers to execute arbitrary SQL commands via the id parameter.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2951

CWE : Common Weakness Enumeration

id	Name
CWE-89	Improper Sanitization of Special Elements used in an SQL Command ('SQL Injection')

CPE : Common Platform Enumeration

Type	Description	Count
Application	Plogger Plogger cpe:/a:plogger:plogger:-	1

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/53644
MISC	http://packetstormsecurity.org/files/112947/Plogger-Photo-Gallery-SQL-Injecti...
XF	http://xforce.iss.net/xforce/xfdb/75789

Alert History

Date	Informations
2013-05-10 22:41:00	Multiple Updates