CVE-2017-15949: SQL Injection
Published Oct 28, 2017
·Updated
Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php.
Affected Software
1 affected component
Angry-frog Xavier=2.4
Remediation
Patch Available
Event History
Oct 28, 2017
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15949?
The severity of CVE-2017-15949 is classified as critical due to its potential for SQL injection attacks.
2
How do I fix CVE-2017-15949?
To fix CVE-2017-15949, update to a patched version of Xavier PHP Management Panel or validate and sanitize user inputs.
3
What are the affected software versions for CVE-2017-15949?
CVE-2017-15949 affects Xavier PHP Management Panel version 2.4.
4
What type of vulnerability is CVE-2017-15949?
CVE-2017-15949 is an SQL injection vulnerability that allows unauthorized access to the database.
5
Which parameters are exploited in CVE-2017-15949?
CVE-2017-15949 exploits the usertoedit parameter in admin/adminuseredit.php and the log_id parameter in admin/editgroup.php.