CVE-2012-4951

Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the (1) TerminalId, (2) ModelName, or (3) ApplicationName parameter.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.52% chance of exploitation in the next 30 days, 74th percentile

Published

2012-11-15

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/38010

Security advisories

• http://www.kb.cert.org/vuls/id/180091
• http://www.securityfocus.com/bid/56409

References

• CVE Record
• NVD entry