CVE-2015-2956 SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| igreks milkystep light | <= 0.94 | No fix listed |
| igreks milkystep professional | <= 1.82 | No fix listed |
| igreks milkystep professional oem | <= 1.82 | No fix listed |
References
- jvn.jp
- JVN#52478686 third-party-advisory vendor-advisory
- JVNDB-2015-000081 third-party-advisory vendor-advisory
- 75076 vdb-entry