SQL Injection in Adrian Chadd Rtg

CVE-2012-3881

Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) 95.php, (2) view.php, or (3) rtg.php.

Vulnerability class: SQL Injection

EPSS: 0.011 (63.1th percentile) — read the EPSS interpretation.

Affected products

Adrian_chadd Rtg — versions 0.7.4
Adrian_chadd Rtg2 — versions 0.9.2
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (x_refsource_MISC)