CVE-2012-4570

Critical

Published: 23/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in LetoDMS before version 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

Attackers may gain access to sensitive data or compromise database integrity, leading to serious consequences for the organization.

Recommendation

It is recommended to update LetoDMS to version 3.3.8 or later to mitigate this vulnerability.

Original NVD description (English source)

SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.