7 matches found
EUVD-2015-3055
Malware in sbrugna...
Sysphonic <= 2.3.0 Thetis SQL 注入漏洞
No description provided by source...
CVE-2015-2972
Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-2972
Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-2972
Thetis is a Sysphonic Thetis (Thetis groupware) vulnerability (CVE-2015-2972) involving SQL injection (CWE-89) in Thetis before 2.3.0. Affected component: Thetis software; root cause: insecure handling of SQL queries allowing remote attackers to execute arbitrary SQL via unspecified vectors. Impa...
JVN#19011483: Thetis vulnerable to SQL injection
Thetis provided by Sysphonic Co., Ltd. is an open source groupware and SNS. Thetis contains a SQL injection CWE-89 vulnerability. Impact An attacker may obtain or alter information stored in the database. Solution Apply an Update Apply the update according to the information provided by the...