CVE-2015-5659

EUVD-2015-5609
SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
Affected Products (NVD)
VendorProductVersion
network_applied_communication_laboratoryshimane_prefecture_cms
2.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN84982142/995760/index.html
http://jvn.jp/en/jp/JVN84982142/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000158
https://github.com/NaCl-Ltd/pref-shimane-cms/blob/master/README.md
https://github.com/NaCl-Ltd/pref-shimane-cms/commit/5ec03cb174513844c410ee7fba594c544ba80ce2
https://github.com/NaCl-Ltd/pref-shimane-cms/commit/ab96ec7661f15a0129940eed9215c91f1acbf564
http://jvn.jp/en/jp/JVN84982142/995760/index.html
http://jvn.jp/en/jp/JVN84982142/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000158
https://github.com/NaCl-Ltd/pref-shimane-cms/blob/master/README.md
https://github.com/NaCl-Ltd/pref-shimane-cms/commit/5ec03cb174513844c410ee7fba594c544ba80ce2
https://github.com/NaCl-Ltd/pref-shimane-cms/commit/ab96ec7661f15a0129940eed9215c91f1acbf564