SQL Injection Vulnerability in ResourceSpace by Montala Limited
CVE-2015-6915

Currently unrated

Key Information:

Vendor

Montala

Status
Resourcespace
Vendor
CVE Published:
11 September 2015

What is CVE-2015-6915?

An SQL injection vulnerability exists in ResourceSpace versions 7.3.7009 and earlier, permitting remote attackers to execute arbitrary SQL commands. This vulnerability is exploited by manipulating the 'user' cookie sent to the feedback plugin, particularly targeting the feedback.php script. Successful exploitation could lead to unauthorized data access and potential database compromise, making it critical for users to upgrade to fixed versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://packetstormsecurity.com/files/133297/ResourceSpace...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.