CVE-2015-6537

Critical

Published: 27/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in the login page in Epiphany Cardio Server 3.3 allows remote attackers to execute arbitrary SQL commands via a crafted URL.

Risk Assessment

Attackers may gain access to sensitive data in the database, potentially leading to serious security breaches for the organization.

Recommendation

It is recommended to update to the latest version of Epiphany Cardio Server and implement safeguards against SQL injection attacks.

Original NVD description (English source)

SQL injection vulnerability in the login page in Epiphany Cardio Server 3.3 allows remote attackers to execute arbitrary SQL commands via a crafted URL.