CVE-2015-6915

High

Published: 11/09/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

CVE-2015-6915 is an SQL injection vulnerability in ResourceSpace version 7.3.7009 and earlier, allowing remote attackers to execute arbitrary SQL commands via the 'user' cookie in feedback.php.

Risk Assessment

Attackers may gain access to sensitive data in the database, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to upgrade to the latest version of ResourceSpace and implement input data filtering to prevent SQL injection attacks.

Other vulnerabilities in ResourceSpace

CVE-2019-25662High
ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'ref' parameter. Attackers can send GET requests to the watched_searches.php endpoint with crafted SQL payloads.

Original NVD description (English source)

SQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote attackers to execute arbitrary SQL commands via the "user" cookie to plugins/feedback/pages/feedback.php.