Security Advisory

CVE-2015-1428

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-02-03 16:00:00

Last updated 2024-08-06 04:40:18

Assigner mitre

State PUBLISHED

Description

Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or (2) remote authenticated users to execute arbitrary SQL commands via the value_id parameter in a save_value action to backend/main.php.

← Browse all CVEs View on cve.org ↗