What’s Vulnerable › Vulnerabilities

CVE-2012-10008: uakfdotb oneapp sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-20 · updated 2026-06-16
• Weakness: CWE-89

Description

A vulnerability, which was classified as critical, has been found in uakfdotb oneapp. This issue affects some unknown processing. The manipulation leads to sql injection. The attack may be initiated remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 5413ac804f1b09f9decc46a6c37b08352c49669c. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221483.

Affected products

• uakfdotb oneapp: before 2012-05-09 — fixed in 2012-05-09

How to fix

Upgrade to a fixed version: uakfdotb oneapp 2012-05-09. Check the vendor advisory for mitigations.

References

• https://github.com/uakfdotb/oneapp/commit/5413ac804f1b09f9decc46a6c37b08352c49669c
• https://vuldb.com/?ctiid.221483
• https://vuldb.com/?id.221483
• https://github.com/uakfdotb/oneapp/commit/5413ac804f1b09f9decc46a6c37b08352c49669c
• https://vuldb.com/?ctiid.221483
• https://vuldb.com/?id.221483

Get alerted when CVE-2012-10008 or the next vulnerability affects your stack