CVE-2012-5162: Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attac...

Security readout for executives and security teams

CVE-2012-5162 is a SQL injection issue in OSClass before 2.3.5. A remote attacker could manipulate the id parameter in category-related admin AJAX actions and run arbitrary SQL. Business impact depends on whether vulnerable OSClass sites remain deployed and reachable. Exposure is likely limited to legacy OSClass deployments older than 2.3.5, especially if administrative AJAX routes are reachable. The bundle does not identify affected CPEs or hosting patterns, so inventory confirmation is required. Prioritize if OSClass is still used in production or exposed to the internet. The vulnerability is old, but arbitrary SQL capability can threaten customer data, site integrity, and administrative control. Mitigation focus: Inventory OSClass deployments and confirm whether any are older than 2.3.5.; Upgrade affected OSClass installations to 2.3.5 or a later vendor-supported release.; Review the referenced upstream commit and release note before applying changes..

Prepared

Jun 27, 2026, 16:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.