CVE-2015-2237

Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) showprofile.php or (2) categoryedit.php or (3) username parameter in a login to index.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.40% chance of exploitation in the next 30 days, 83th percentile

Published

2015-03-12

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/36306

References

• CVE Record
• NVD entry

Related

• CVE-2015-2223
• CVE-2015-2248
• CVE-2015-2219
• CVE-2015-2269
• CVE-2015-2218
• CVE-2015-2275