CVE-2015-1471

Pragyan CMS is affected by an SQL injection in userprofile.lib.php (Pragyan CMS 3.0). The vulnerability allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI. The issue is confirmed across multiple sources (NVD entry CVE-2015-1471 and OpenVAS probe), ...