CVE-2012-3839 describes multiple SQL injection vulnerabilities in MyClientBase 0.12, specifically within the application/core/MY_Model.php file. Attackers can exploit these flaws by injecting malicious SQL commands via the 'invoice_number' or 'tags' parameters to index.php/invoice_search. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing unauthenticated remote attackers to achieve partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry (EDB-18814) exists, and community discussion and media coverage are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.12CPE matchmatch criteria | cpe:2.3:a:myclientbase:myclientbase:0.12:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.