CVE-2015-1471

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2015-02-12 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI.

Affected products

Pragyan Cms Project Pragyan Cms: 3.0

References

http://pastebin.com/ip2gGYuS
http://seclists.org/fulldisclosure/2015/Feb/18
http://seclists.org/oss-sec/2015/q1/402
http://sroesemann.blogspot.de/2015/01/sroeadv-2015-11.html
http://sroesemann.blogspot.de/2015/02/advisory-for-sroeadv-2015-11.html
https://github.com/delta/pragyan/commit/c93bc100ec93fc78940fbdca9b6b009101858309
https://github.com/delta/pragyan/issues/206
http://pastebin.com/ip2gGYuS
http://seclists.org/fulldisclosure/2015/Feb/18
http://seclists.org/oss-sec/2015/q1/402
http://sroesemann.blogspot.de/2015/01/sroeadv-2015-11.html
http://sroesemann.blogspot.de/2015/02/advisory-for-sroeadv-2015-11.html

Get alerted when CVE-2015-1471 or the next vulnerability affects your stack