PoC Index

CVE-2015-7568

CRITICAL 9.8EPSS 4.1%

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the account credentials of known users via the "userEmail" parameter.

CVSS v3.0
9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
4.06% chance of exploitation in the next 30 days, 90th percentile
Published
2017-04-24
Updated
2024-08-06

Proof-of-concept exploits (1)

ExploitDB entries (1)

References

Related