CVE-2016-2555 in ATutor

요약

\~에 의해 MITRE

SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 예약하다: 2016. 02. 24.
• 공개: 2017. 04. 13.
• 모더레이션: 수락
• 항목: VDB-99815
• CPE: 준비됨
• CWE: CWE-89 (확인됨)
• 익스플로잇: 다운로드
• CVSS: 9.8 (NVD)
• EPSS: 0.81579
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Education, Police

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2555
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2555
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2555/