cbcvebase.
CVE-2011-5235
published 2012-10-25

CVE-2011-5235: SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link.

PriorityP345high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.89%
76.9th percentile
SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link.

Affected

30 ranges· showing 25
VendorProductVersion rangeFixed in
mnogosearchmnogosearch<= 3.3.11—
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
mnogosearchmnogosearch——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.