CVE-2015-3424

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

1.57% chance of exploitation in the next 30 days, 75th percentile

Published

2019-12-09

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/134176/Accentis-Content-Resource-Management-System-S…

References

• CVE Record
• NVD entry