CVE-2012-2925: Simple PHP Agenda

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action.

Affected products

• Simple PHP Agenda Simple PHP Agenda: version 2.2.8 only

Published 2012-05-21. Last modified 2026-06-16.