CVE-2015-2147

Critical

Published: 06/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before version 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters.

Risk Assessment

Attackers can exploit these vulnerabilities to gain access to sensitive data or manipulate the database, potentially leading to serious consequences for the organization.

Recommendation

It is recommended to upgrade to the latest version of phpBugTracker to eliminate these vulnerabilities and conduct a security audit of the application.

Original NVD description (English source)

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters.