Security Advisory

CVE-2015-6944

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-09-15 18:00:00
Last updated 2024-08-06 07:36:35
Assigner mitre
State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to hijack the authentication of users for requests that execute arbitrary SQL commands via the cmd parameter to sys/sys/listaBD2.jsp.