Vulnerability Database

322,904

Total vulnerabilities in the database

CVE-2012-0999

SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the group_id parameter.

Published: Feb 24, 2012
Updated: Nov 9, 2025
CVE: CVE-2012-0999
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
lepton-cms / lepton	1.1.1	1.1.1.x
lepton-cms / lepton	1.1.2	1.1.2.x
lepton-cms / lepton	1.1.0	1.1.0.x
lepton-cms / lepton	-	1.1.3.x

http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt
http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php
https://www.htbridge.ch/advisory/HTB23072

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo