CVE-2015-2843

Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1)…

published May 12, 2015

CVSS
—
EPSS
38%
Percentile
98.5
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4) index.php/go_site/go_get_user_info/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.37928 · 98.5th percentile
Published
2015-05-12T19:00Z
EPSS history
Timeline
  • 12 MAY 19:00Z
    Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1)…
    cvelistv5