NVD

Id
23787  
Name
CVE-2015-1476  
Description
Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the (1) productbycat parameter to product.php, or (2) username or (3) password parameter to __admin/index.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-02-04  
Modified Date
2015-02-04  
Seq
2015-1476  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126456 23787 CVE-2015-1476 http://packetstormsecurity.com/files/130073/ecommerceMajor-SQL-Injection.html  View
126457 23787 CVE-2015-1476 35878  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6132 JVNDB-2015-001452 xlinkerz ecommerceMajor における SQL インジェクションの脆弱性 xlinkerz ecommerceMajor は、SQL インジェクションの脆弱性が存在します。 CVE-2015-1476 78701 CVE-2015-1476 23787 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001452.html 2015-01-22 2015-02-13 View