CVE-2015-7567

2020-02-1817:41:12

redhat

www.cve.org

0.011 Low

EPSS

Percentile

84.7%

JSON

SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the “passwordreset&token” parameter.

CNA Affected

[
  {
    "product": "Yeager CMS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.1"
      }
    ]
  }
]

References

packetstormsecurity.com/files/135716/Yeager-CMS-1.2.1-File-Upload-SQL-Injection-XSS-SSRF.html

seclists.org/fulldisclosure/2016/Feb/44

www.securityfocus.com/archive/1/archive/1/537493/100/0/threaded

www.exploit-db.com/exploits/39436/

0.011 Low

EPSS

Percentile

84.7%

JSON

Related for CVELIST:CVE-2015-7567