EUVD-2015-3055

Malware in sbrugna...

Sysphonic <= 2.3.0 Thetis SQL 注入漏洞

No description provided by source...

Sql injection

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972

Thetis is a Sysphonic Thetis (Thetis groupware) vulnerability (CVE-2015-2972) involving SQL injection (CWE-89) in Thetis before 2.3.0. Affected component: Thetis software; root cause: insecure handling of SQL queries allowing remote attackers to execute arbitrary SQL via unspecified vectors. Impa...

CVE-2015-2972: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

JVN#19011483: Thetis vulnerable to SQL injection

Thetis provided by Sysphonic Co., Ltd. is an open source groupware and SNS. Thetis contains a SQL injection CWE-89 vulnerability. Impact An attacker may obtain or alter information stored in the database. Solution Apply an Update Apply the update according to the information provided by the...