Mangoos · Mangosweb Enhanced · CVE-2012-5348
**Name of the Vulnerable Software and Affected Versions**
MangosWeb Enhanced version 3.0.3
**Description**
A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the `login` parameter in a login action to the "index.php" endpoint.
**Recommendations**
For MangosWeb Enhanced version 3.0.3, consider restricting access to the "index.php" endpoint until a patch is available, and avoid using the `login` parameter in login actions to minimize the risk of exploitation.