CVE-2015-1423
MEDIUM 6.5EPSS 1.8%
Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote administrators to execute arbitrary SQL commands via the (1) jak_delete_log[] or (2) ssp parameter to admin/index.php.
- CVSS v2.0 NVD
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 1.80% chance of exploitation in the next 30 days, 78th percentile
- Published
- 2015-01-29
- Updated
- 2024-08-06