CVE-2015-3424

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2019-12-09

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Content Resource Management System (Accentis)

References

• http://packetstormsecurity.com/files/134176/Accentis-Content-Resource-Management-System-SQL-Injection.html