CVE-2015-7569

SQL injection vulnerability in "yeager/y.php/tabUSERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary SQL commands via the "pagedirorderby" parameter...

CVE-2015-7569

Summary: CVE-2015-7569 is a SQL injection vulnerability in Yeager CMS 1.2.1, exploitable via the pagedir_orderby parameter in yeager/y.php/tab_USERLIST. Local users can cause arbitrary SQL execution, with impact reported as partial confidentiality, integrity, and availability. The issue is tied t...