CVE

Id
78853  
CVE No.
CVE-2015-1576  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameter to (1) copy2.php, (2) localize.php, (3) metai.php, (4) nc.php, (5) new2.php, or (6) rename2.php in u5admin/; (7) c parameter to u5admin/editor.php; (8) typ parameter to u5admin/meta2.php; or (9) newname parameter to u5admin/rename2.php.  
Phase
Assigned (20150211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
719032 78853 CVE-2015-1576 MISC:http://packetstormsecurity.com/files/130326/u5CMS-3.9.3-SQL-Injection.html  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6425 JVNDB-2015-001745 Microsoft Exchange Server 2013 の Outlook Web App におけるクロスサイトスクリプティングの脆弱性 Microsoft Exchange Server 2013 の Outlook Web App (OWA) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-1628 78853 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001745.html  View