CVE-2015-2237

Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to…

published March 12, 2015

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) showprofile.php or (2) categoryedit.php or (3) username parameter in a login to index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02397 · 83.9th percentile
Published
2015-03-12T17:00Z
EPSS history
Timeline
  • 12 MAR 17:00Z
    Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to…
    cvelistv5