CVE-2013-3527
HIGH 7.5EPSS 3.5%
Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to (1) entry/signin or (2) entry/passwordrequest.
- CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 3.51% chance of exploitation in the next 30 days, 88th percentile
- Published
- 2013-05-10
- Updated
- 2024-08-06