CVE-2011-5230 — Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoaster_core/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login parameter to sys/login/index or (2) memberLoginName parameter to sys/login/member

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoaster_core/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login parameter to sys/login/index or (2) memberLoginName parameter to sys/login/member

Published Oct 25, 2012

7.5

HIGH

CVSS 2.0

EPSS 2.24%

Description

Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoaster_core/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login parameter to sys/login/index or (2) memberLoginName parameter to sys/login/member.

Affected products

Remediation

No remediation recorded yet.

Metrics

2.24% 0.02237

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02237

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (14 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.24% (0.02237)	82.19th	v5 (v2026.06.15)
Jun 15, 2026	2.24% (0.02237)	80.45th	v5 (v2026.06.15)
Mar 17, 2025	1.64% (0.01643)	80.69th	v4 (v2025.03.14)
Dec 12, 2024	0.09% (0.00087)	39.05th	v3 (v2023.03.01)
Mar 22, 2024	0.21% (0.00207)	57.99th	v3 (v2023.03.01)
Feb 8, 2024	0.29% (0.00294)	68.36th	v3 (v2023.03.01)
Sep 15, 2023	0.29% (0.00294)	65.53th	v3 (v2023.03.01)
Jul 13, 2023	0.24% (0.00238)	60.86th	v3 (v2023.03.01)
May 13, 2023	0.41% (0.00411)	70.12th	v3 (v2023.03.01)
Mar 7, 2023	0.24% (0.00238)	60.06th	v3 (v2023.03.01)
Mar 6, 2023	0.99% (0.00986)	37.57th	v2 (v2022.01.01)
Sep 9, 2022	0.99% (0.00986)	35.83th	v2 (v2022.01.01)
Apr 1, 2022	0.99% (0.00986)	33.83th	v2 (v2022.01.01)
Feb 4, 2022	0.99% (0.00986)	17.63th	v2 (v2022.01.01)

Weaknesses (1)

CWE-89

SQL Injection

References (5)

http://osvdb.org/77736
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/46881
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/18246
exploitx_refsource_EXPLOIT-DB
http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-06.txt
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/71843
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/77736		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/46881		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/18246		exploitx_refsource_EXPLOIT-DB
http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-06.txt		x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/71843		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 25, 2012

Updated Aug 7, 2024

Reserved Oct 25, 2012

Link CVE-2011-5230

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2011-5230

Red Hat

Severity n/a

Public date n/a

Links CVE-2011-5230