CVE-2015-2147

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-10-06

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Phpbugtracker (Phpbugtracker Project)

References

• http://cve.killedkenny.io/cve/CVE-2015-2147
• http://www.openwall.com/lists/oss-security/2015/02/28/1