CVE-2015-5052
CriticalSummary
CVE-2015-5052 is an SQL injection vulnerability in Sefrengo before version 1.6.5 beta2.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially exposing sensitive information.
Recommendation
It is recommended to upgrade Sefrengo to version 1.6.5 beta2 or later to mitigate this vulnerability.
Other vulnerabilities in Sefrengo
See all- CVE-2015-1428High
Multiple SQL injection vulnerabilities in Sefrengo before version 1.6.2 allow remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or via the value_id parameter in a save_value action to backend/main.php.
- CVE-2015-0919High
Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before version 1.6.1 allow remote administrators to execute arbitrary SQL commands via the (1) idcat or (2) idclient parameter to backend/main.php.
Original NVD description (English source)
SQL injection vulnerability in Sefrengo before 1.6.5 beta2.