rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-6559 
Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) mac, (3) graphtype, (4) name, or (5) type parameter to stats.php; or (6) comment parameter to deviceadd.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-23T15:00:00.000Z
CVE-2012-6560 
SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-23T15:00:00.000Z
CVE-2012-6561 
Cross-site scripting (XSS) vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-23T15:00:00.000Z
CVE-2012-6562 
engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-23T15:00:00.000Z
CVE-2012-6563 
engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-23T15:00:00.000Z
CVE-2012-6564 
Cross-site scripting (XSS) vulnerability in REDCap before 4.14.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-17T10:00:00.000Z
CVE-2012-6565 
Cross-site scripting (XSS) vulnerability in REDCap before 4.14.3 allows remote authenticated users to inject arbitrary web script or HTML via uppercase characters in JavaScript events within user-defined labels.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-17T10:00:00.000Z
CVE-2012-6566 
Cross-site scripting (XSS) vulnerability in REDCap before 4.14.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-17T10:00:00.000Z
CVE-2012-6567 
REDCap before 4.14.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the logic of a custom rule.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-17T10:00:00.000Z
CVE-2012-6568 
Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS_PLUGIN_NAME string in a plug-in configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-20T15:00:00.000Z
CVE-2012-6569 
Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-20T15:00:00.000Z
CVE-2012-6570 
The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remote HTTP servers to conduct heap-based buffer overflow attacks and execute arbitrary code via a crafted response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-20T15:00:00.000Z
CVE-2012-6571 
The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-20T15:00:00.000Z
CVE-2012-6572 
Cross-site scripting (XSS) vulnerability in the phptemplate_preprocess_node function in template.php in the Inf08 theme 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-21T19:00:00.000Z
CVE-2012-6573 
Cross-site scripting (XSS) vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-25T18:00:00.000Z
CVE-2012-6574 
Cross-site scripting (XSS) vulnerability in the Fonecta verify module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-27T20:00:00.000Z
CVE-2012-6575 
Cross-site scripting (XSS) vulnerability in the Exposed Filter Data module 6.x-1.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-27T20:00:00.000Z
CVE-2012-6576 
Cross-site scripting (XSS) vulnerability in the PRH Search module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-27T20:00:00.000Z
CVE-2012-6577 
SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-27T20:00:00.000Z
CVE-2012-6578 
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key for signing, which might allow remote attackers to spoof messages by leveraging the lack of authentication semantics.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-24T10:00:00.000Z
CVE-2012-6579 
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to configure encryption or signing for certain outbound e-mail, and possibly cause a denial of service (loss of e-mail readability), via an e-mail message to a queue's address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-24T10:00:00.000Z
CVE-2012-6580 
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, does not ensure that the UI labels unencrypted messages as unencrypted, which might make it easier for remote attackers to spoof details of a message's origin or interfere with encryption-policy auditing via an e-mail message to a queue's address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-24T10:00:00.000Z
CVE-2012-6581 
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to bypass intended restrictions on reading keys in the product's keyring, and trigger outbound e-mail messages signed by an arbitrary stored secret key, by leveraging a UI e-mail signing privilege.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-24T10:00:00.000Z
CVE-2012-6582 
Cross-site scripting (XSS) vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via a stopforumspam.com API response, which is logged by the watchdog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-20T18:00:00.000Z
CVE-2012-6583 
Cross-site scripting (XSS) vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "administer imagemenu" permission to inject arbitrary web script or HTML via an image file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-23T15:00:00.000Z
CVE-2012-6584 
Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands via the bathrooms1 parameter to (1) demo2/search.php or (2) search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2012-6585 
Cross-site scripting (XSS) vulnerability in search.php in MYRE Realty Manager allows remote attackers to inject arbitrary web script or HTML via the cat_id1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2012-6586 
Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL commands via the (1) garage1 or (2) bathrooms1 parameter to vacation/1_mobile/search.php, or (3) unspecified input to vacation/widgate/request_more_information.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2012-6587 
Cross-site scripting (XSS) vulnerability in vacation/1_mobile/alert_members.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the link_idd parameter in a login action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2012-6588 
SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2012-6589 
Cross-site scripting (XSS) vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbitrary web script or HTML via the look parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2012-6590 
The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via crafted input, aka Ref ID 33139.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6591 
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 31116.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6592 
Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 31091.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6593 
Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6594 
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6595 
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6596 
Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6597 
Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service (management-server crash) by using the command-line interface for a crafted command, aka Ref ID 35254.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6598 
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33080.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6599 
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33476.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6600 
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 34502.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6601 
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6602 
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6603 
The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to bypass authentication and obtain administrator privileges via unspecified vectors, aka Ref ID 37034.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6604 
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 35249.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6605 
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 34896.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6606 
Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof portal servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2012-6607 
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-23T18:00:00.000Z
CVE-2012-6608 
Cross-site scripting (XSS) vulnerability in xmlservices/E_book.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-25T19:00:00.000Z
CVE-2012-6609 
Directory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-28T16:28:48.000Z
CVE-2012-6610 
Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (semicolon) to the ping command feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-28T16:28:44.000Z
CVE-2012-6611 
An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14.g3. It has a blank administrative password by default, and can be successfully used without setting this password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-10T14:47:38.000Z
CVE-2012-6612 
The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-07T21:00:00.000Z
CVE-2012-6613 
D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of the admin password for the admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-25T18:46:52.000Z
CVE-2012-6614 
D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-19T14:17:39.000Z
CVE-2012-6615 
The ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a subtitle dialog without text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-24T20:00:00.000Z
CVE-2012-6616 
The mov_text_decode_frame function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via crafted 3GPP TS 26.245 data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-24T20:00:00.000Z
CVE-2012-6617 
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-24T20:00:00.000Z
CVE-2012-6618 
The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-24T20:00:00.000Z
CVE-2012-6619 
The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-06T15:00:00.000Z
CVE-2012-6620 
Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in Horde Kronolith H4 before 3.0.17 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T21:00:00.000Z
CVE-2012-6621 
Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path parameter to admin/upload.php; (4) err parameter to admin/theme.php; (5) error parameter to admin/pages.php; or (6) success or (7) err parameter to admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T21:00:00.000Z
CVE-2012-6622 
Multiple cross-site scripting (XSS) vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) groupid parameter in an editgroup action or (2) usergroup_id parameter in an edit_usergroup action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T21:00:00.000Z
CVE-2012-6623 
Cross-site scripting (XSS) vulnerability in fs-admin/wpf-add-forum.php in the ForumPress WP Forum Server plugin before 1.7.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the groupid parameter in an addforum action to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T21:00:00.000Z
CVE-2012-6624 
Cross-site scripting (XSS) vulnerability in the SoundCloud Is Gold plugin 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter in a soundcloud_is_gold_player_preview action to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T21:00:00.000Z
CVE-2012-6625 
SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T21:00:00.000Z
CVE-2012-6626 
SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-16T21:00:00.000Z