### [CVE-2012-2236](https://www.cve.org/CVERecord?id=CVE-2012-2236) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=brightgreen) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) ### Description SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action. ### POC #### Reference No PoCs from references. #### Github No PoCs found on GitHub currently. #### ExploitDB - https://www.exploit-db.com/exploits/18519