CVE-2012-5244: Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute...

Security readout for executives and security teams

Banana Dance B.2.6 and earlier has multiple SQL injection flaws. A remote attacker could manipulate database queries through exposed PHP endpoints, potentially reading or changing site data depending on database permissions. The sources do not provide CVSS, vendor fix details, or evidence of active exploitation. Exposure is likely limited to organizations still running Banana Dance B.2.6 or earlier, especially if the application is internet-facing and the listed PHP endpoints are reachable. The source bundle does not provide CPEs, install prevalence, or supported fixed versions. Treat as high priority for any active Banana Dance deployment. SQL injection can directly threaten website data integrity and confidentiality, and public exploit information exists. Priority drops if asset inventory confirms the product is not present. Mitigation focus: Inventory public and internal sites for Banana Dance B.2.6 or earlier.; Check vendor or archival advisory guidance for a fixed version or supported remediation.; Retire or replace unsupported Banana Dance deployments where no maintained fix exists..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.