CVE-2012-5342

CVE-2012-5342 describes multiple SQL injection vulnerabilities in SenseSites CommonSense CMS, specifically affecting michau_enterprises_llc commonsense_cms. Remote attackers can exploit these flaws by manipulating the 'id' parameter in special.php, article.php, or cat2.php to execute arbitrary SQL commands. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.