CVE-2015-1400 - SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter

HIGH

SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter

Published Feb 3, 2015

7.5

HIGH

CVSS 2.0

EPSS 2.41%

SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://packetstormsecurity.com/files/130179/NPDS-CMS-Revolution-13-SQL-Injection.html		x_refsource_MISCExploit
http://websecgeeks.com/npds-cms-sql-injection/		x_refsource_MISCExploit
http://www.npds.org/viewtopic.php?topic=26189&forum=12		x_refsource_CONFIRMVendor Advisory
http://www.npds.org/viewtopic.php?topic=26233&forum=12		x_refsource_CONFIRMVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 3, 2015

Updated Aug 6, 2024

Reserved Jan 27, 2015

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a