CVE-2015-5052

SQL injection vulnerability in Sefrengo before 1.6.5 beta2...

CVE-2015-5052

The connected sources confirm a SQL injection vulnerability in Sefrengo prior to version 1.6.5 beta2. The flaw affects the web CMS (PHP/MySQL) and, if exploitable, allows an attacker to execute arbitrary SQL commands remotely, with the impact described as affecting confidentiality, integrity, and...