CVE-2017-15949

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...

CVE-2017-15949

CVE-2017-15949 affects Xavier PHP Management Panel 2.4. The vulnerability is an SQL injection in the admin/adminuseredit.php endpoint (parameter: usertoedit) and in admin/editgroup.php (parameter: log_id). Exploitation could allow an attacker to inject SQL commands and potentially take control of...

Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities

Document Title: =============== Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2076 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15949 CVE-ID: ======= CVE-2017-15949 Release Date:...