CVE-2012-5910: b2evolution

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter.

Affected products

• b2evolution b2evolution: version 4.1.3 only

Published 2012-11-17. Last modified 2026-06-16.