CVE-2012-5698

CVE-2012-5698 describes a critical SQL injection vulnerability affecting BabyGekko versions prior to 1.2.4. This flaw allows an unauthenticated attacker to execute arbitrary SQL commands, potentially leading to full compromise of the underlying database and application. With a CVSS score of 8.8 (High) and a FAUCET Risk Score of 91/100, the vulnerability is easily exploitable over the network with no user interaction required, resulting in high impact to confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, public exploit code exists on ExploitDB, indicating a potential for exploitation, though there is no evidence of widespread active exploitation or significant community discussion.