high7.5
CVE-2015-2956
SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL comma…
Impact
SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Igreks | Milkystep Light | through 0.94 |
| Igreks | Milkystep Professional | through 1.82 |
| Igreks | Milkystep Professional Oem | through 1.82 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN52478686/995646/index.html
- http://jvn.jp/en/jp/JVN52478686/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000081
- http://www.securityfocus.com/bid/75076
- http://jvn.jp/en/jp/JVN52478686/995646/index.html
- http://jvn.jp/en/jp/JVN52478686/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000081
- http://www.securityfocus.com/bid/75076