PT-2015-3509

Name of the Vulnerable Software and Affected Versions Redaxscript version 0.3.2 Description The issue concerns SQL injection vulnerabilities in the includes/password.php file. Remote attackers can execute arbitrary SQL commands by manipulating the id or password parameters in the password reset...

CVE-2011-5313: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in includes/password.php in Redaxscript 0.3.2 allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 password parameter to the passwordreset program...