CVE-2015-3637
SQL injection vulnerability in phpMyBackupPro when run in multi-user mode before 2.5 allows remote attackers to execute arbitrary SQL commands via the username and password parameters.
- Score
- CVSS 3.0 8.1 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-12-28
- Last modified
- 2024-08-06
- Weaknesses
- CWE-89
Affected products
References
- http://www.openwall.com/lists/oss-security/2015/05/04/4
- http://www.securitytracker.com/id/1032250