CVE-2012-6039
UnknownEPSS 1.11%
Last modified
CVE-2012-6039 is a vulnerability of currently unknown severity. SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter.. EPSS estimates a 1.11% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Yabsoft | Advanced Image Hosting Script | All versions |
| Yabsoft | Advanced Image Hosting Script | 2.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-6039?
SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter.
How severe is CVE-2012-6039?
Severity scoring for CVE-2012-6039 is pending analysis. The EPSS model estimates a 1.11% probability of exploitation in the next 30 days.
How do I fix CVE-2012-6039?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-6033The do_tmem_control function in the Transcendent Memory (TME…
- CVE-2012-6034The (1) tmemc_save_get_next_page and (2) tmemc_save_get_next…
- CVE-2012-6035The do_tmem_destroy_pool function in the Transcendent Memory…
- CVE-2012-6036The (1) memc_save_get_next_page, (2) tmemc_restore_put_page …
- CVE-2012-6037Multiple cross-site scripting (XSS) vulnerabilities in Mahar…
- CVE-2012-6038admin/core/admin_func.php in razorCMS before 1.2.1 does not …
- CVE-2012-6040Cross-site scripting (XSS) vulnerability in users.php in Fil…
- CVE-2012-6041Double free vulnerability in GreenBrowser before 6.0.1002, w…
- CVE-2012-6042GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to…
- CVE-2012-6043Cross-site scripting (XSS) vulnerability in downloads.php in…
- CVE-2012-6044M-Player 0.4 allows remote attackers to cause a denial of se…
- CVE-2012-6045Cross-site scripting (XSS) vulnerability in gb/user/index.ph…
Are you affected by CVE-2012-6039?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST