CVE-2012-2105

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.92%

Published

Sep 19, 2012

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBTimesheet Next Gen 1.5.2 - Multiple SQL Injections

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.

Weaknesses (CWE)

CWE-89

Affected Products (1)

peter_kovacs · timesheet_next_genvulnerable

References (18)

http://archives.neohapsis.com/archives/bugtraq/2012-03/0011.html

Exploit

http://secunia.com/advisories/48239

Vendor Advisory

http://sourceforge.net/apps/mantisbt/tsheetx/view.php?id=122

http://www.exploit-db.com/exploits/18554

Exploit

http://www.openwall.com/lists/oss-security/2012/04/16/4

http://www.openwall.com/lists/oss-security/2012/04/16/7

http://www.osvdb.org/79804

http://www.securityfocus.com/bid/52270

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/73680

http://archives.neohapsis.com/archives/bugtraq/2012-03/0011.html

Exploit

http://secunia.com/advisories/48239

Vendor Advisory

http://sourceforge.net/apps/mantisbt/tsheetx/view.php?id=122

http://www.exploit-db.com/exploits/18554

Exploit

http://www.openwall.com/lists/oss-security/2012/04/16/4

http://www.openwall.com/lists/oss-security/2012/04/16/7

http://www.osvdb.org/79804

http://www.securityfocus.com/bid/52270

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/73680

KEV Catalog EPSS Scores Vendors All CVEs