CVE-2015-1576 - CVE House
Back to Database
Status published High CVE-2015-1576

Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote...

Vulnerability Description

Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameter to (1) copy2.php, (2) localize.php, (3) metai.php, (4) nc.php, (5) new2.php, or (6) rename2.php in u5admin/; (7) c parameter to u5admin/editor.php; (8) typ parameter to u5admin/meta2.php; or (9) newname parameter to u5admin/rename2.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-1576

Credits & Attribution

No credits recorded in the NVD database.

References

More from yuba

View All →
CVE-2022-34937
Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request...
High 8.8
CVE-2022-32444
An issue was discovered in u5cms verion 8.3.5 There is...
Medium 6.1
CVE-2022-32442
u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS)....
Medium 6.1
CVE-2015-1578
Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote...
Medium 5.8
CVE-2015-1577
Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows...
Medium 6.4

Affected Vendor

Affected Software

u5cms
Vulnerable Versions:
0

Timeline

Official Publish: February 11th, 2015
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.