CVE-2012-1002

SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

Date published : 2012-02-07

http://www.securityfocus.com/bid/51927

http://www.openconf.com/news/#20120202