CVE-2012-5694: Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 all...

Security readout for executives and security teams

This is a SQL injection issue in Bulb Security Smartphone Pentest Framework before 0.1.3. If the SPF web GUI is reachable, a remote attacker could manipulate several parameters to run unintended database commands. Business risk depends heavily on whether this old framework is still installed and exposed. Likely exposure is limited to organizations that installed Bulb Security Smartphone Pentest Framework before 0.1.3 and left frameworkgui reachable by untrusted users or networks. The provided affected-product metadata is incomplete. Treat as an exposure-discovery item unless SPF is confirmed internet-facing or business-critical. If present and reachable, prioritize upgrade, isolation, or retirement because database command execution can compromise sensitive test data and tooling state. Mitigation focus: Upgrade SPF to version 0.1.3 or later if still deployed.; If upgrade status is unclear, check vendor or project guidance.; Restrict frameworkgui access to trusted administrative networks only..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.