CVE-2015-1428

🗓️ 03 Feb 2015 16:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 60 Views🌐 WEB

CVE-2015-1428 SQL injection in Sefrengo before 1.6.

Reporter	Title	Published	Views	Family All 11
zdt	Sefrengo CMS 1.6.1 - Multiple SQL Injection Vulnerabilities	3 Feb 201500:00	–	zdt
CNVD	Multiple SQL Injection Vulnerabilities in Sefrengo CMS	4 Feb 201500:00	–	cnvd
Cvelist	CVE-2015-1428	3 Feb 201516:00	–	cvelist
Exploit DB	Sefrengo CMS 1.6.1 - Multiple SQL Injections	2 Feb 201500:00	–	exploitdb
EUVD	EUVD-2015-1563	7 Oct 202500:30	–	euvd
exploitpack	Sefrengo CMS 1.6.1 - Multiple SQL Injections	2 Feb 201500:00	–	exploitpack
NVD	CVE-2015-1428	3 Feb 201516:59	–	nvd
Packet Storm	Sefrengo CMS 1.6.1 SQL Injection	1 Feb 201500:00	–	packetstorm
Prion	Sql injection	3 Feb 201516:59	–	prion
securityvulns	Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities	2 Feb 201500:00	–	securityvulns

NVD

Node

sefrengo sefrengoRange≤1.6.1

Source	Link
exploit-db	www.exploit-db.com/exploits/35972
securityfocus	www.securityfocus.com/archive/1/534593/100/0/threaded
github	www.github.com/sefrengo-cms/sefrengo-1.x/commit/0b1edd4b22a47743eff7cfaf884ba2a4e06e15eb
itas	www.itas.vn/news/itas-team-found-out-multiple-sql-injection-vulnerabilities-in-sefrengo-cms-v1-6-1-74.html
github	www.github.com/sefrengo-cms/sefrengo-1.x/commit/22c0d16bfd715631ed317cc990785ccede478f07

Parameter	Position	Path	Description	CWE
idcatside	path	sefrengo/backend/main.php?idcatside=	SQL injection via idcatside parameter processed by ac_get_value in ct_sql.inc	CWE-89
value_id	query param	sefrengo/backend/main.php	SQL injection via value_id parameter processed by set_value in class.values_ct.php	CWE-89

17 Jun 2026 00:22Current

8.2High risk

Vulners AI Score8.2

CVSS 27.5

EPSS0.02789

cve-2015-1428 sql injection sefrengo security vulnerability nvd