CVE-2015-10063 saemorris TheRadSystem _login.php redirect sql injection
CriticalCVSS 9.8
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect of the file _login.php. The manipulation of the argument user/pass leads to sql injection. The attack may be initiated remotely. The identifier of the patch is bfba26bd34af31648a11af35a0bb66f1948752a6. It is recommended to apply a patch to fix this issue. The identifier VDB-218453 was assigned to this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| saemorris TheRadSystem | All versions | No fix listed |
| theradsystem project theradsystem | < 2015-04-03 | 2015-04-03 |
References
- vuldb.com technical-description third-party-advisory vdb-entry
- vuldb.com permissions-required signature third-party-advisory
- github.com patch third-party-advisory