CVE-2015-1471 SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI.
HighCVSS 7.5
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pragyan cms project pragyan cms | = 3.0 | No fix listed |
References
- pastebin.com exploit
- 20150203 SQL injection vulnerability in Pragyan CMS v.3.0 mailing-list
- [oss-security] 20150203 Re: CVE-Request -- Pragyan CMS v.3.0 -- SQL injection vulnerability mailing-list
- sroesemann.blogspot.de exploit
- sroesemann.blogspot.de exploit
- github.com
- github.com