CVE-2012-1022

CVE-2012-1022 describes a SQL injection vulnerability in 4images 1.7.10, specifically within the admin/categories.php script. Remote attackers can exploit this by manipulating the cat_parent_id parameter during an addcat action, allowing them to execute arbitrary SQL commands. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. The FAUCET Risk Score is 88/100, further emphasizing its significant risk. While not listed in CISA's KEV catalog or showing active exploitation, an ExploitDB entry (EDB-36643) confirms the existence of public exploit code. Despite this, there is minimal community discussion or media coverage surrounding this decade-old vulnerability.