CVE-2012-5317
SQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote...
SQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote attackers to execute arbitrary SQL commands via the lastname parameter in a process action.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote attackers to execute arbitrary SQL commands via the lastname parameter in a process action.
- Record
CVE-2012-5317- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote attackers to execute arbitrary SQL commands via the lastname parameter in a process action.
- Record
CVE-2012-5317- Updated
- 2026-11-02
EUVDEUVD-2012-5240 No score
SQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote attackers to execute arbitrary SQL commands via the lastname parameter in a process action.
- Record
EUVD-2012-5240- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6q84-7cq9-22rr No score
SQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote...
SQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote attackers to execute arbitrary SQL commands via the lastname parameter in a process action.
- Record
GHSA-6q84-7cq9-22rr- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5317 is a high vulnerability (CVSS 7.5) in Bigware Shop, published October 8, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 71st percentile. No source names a fixed version.
References
dw-itsecurity.de/index.php/unser-service/websicherheit/bigware
archives.neohapsis.com/archives/bugtraq/2012-01/0143.html
securityfocus.com/bid/51640
secunia.com/advisories/47713
bigware.de/12_18_2011-20_40/sicherheit-update-2-1-5-zur-bigware-shopsoftware-2-1
nvd.nist.gov/vuln/detail/CVE-2012-5317
github.com/advisories/GHSA-6q84-7cq9-22rr