Description
SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (4)
Core 4
Core References
Vendor Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN52478686/index.html
Third Party Advisory x_refsource_confirm
http://jvn.jp/en/jp/JVN52478686/995646/index.html
Vendor Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000081
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/75076
Scores
EPSS
0.0129
EPSS Percentile
67.1%
Details
CWE
CWE-89
Status
published
Products (3)
igreks/milkystep_light
< 0.94
igreks/milkystep_professional
< 1.82
igreks/milkystep_professional_oem
< 1.82
Published
Jun 13, 2015
Tracked Since
Feb 18, 2026