CVE-2015-1471

High

Published: 12/02/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

CVE-2015-1471 is an SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 that allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or system compromise.

Recommendation

It is recommended to update Pragyan CMS to the latest version that addresses this vulnerability and to implement input validation to prevent SQL injection attacks.

Other vulnerabilities in Pragyan CMS 3.0

CVE-2015-4627Critical
There is an SQL injection vulnerability in Pragyan CMS 3.0, which may allow attackers to execute unauthorized queries against the database.

Original NVD description (English source)

SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI.