Skip to content

CVE-2015-7382 SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a diff...

HighCVSS 7.5 EPSS 1.5% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009.

Affected products

ProductAffected versionsFixed in
refbase <= 0.9.6 No fix listed

References

  • VU#374092 third-party-advisory us-government-resource