CVE-2012-2908

Name of the Vulnerable Software and Affected Versions Viscacha version 0.8.1.1

Description The issue concerns SQL injection vulnerabilities in the admin/bbcodes.php file. Remote attackers can execute arbitrary SQL commands by manipulating certain parameters. The vulnerable parameters are bbcodeexample, buttonimage, and bbcodetag.

Recommendations For Viscacha version 0.8.1.1, consider restricting access to the admin/bbcodes.php file until a fix is available, and avoid using the bbcodeexample, buttonimage, and bbcodetag parameters in the affected API endpoint to minimize the risk of exploitation.