CVE-2015-2972

Sysphonic Thetis <2.3.0 - SQL Injection

Title source: llm
STIX 2.1

Description

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

References (11)

Core 11
Core References
Vendor Advisory x_refsource_confirm
http://sysphonic.com/en/thetis/THETIS-SEC-001.html
Vendor Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000099
Vendor Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN19011483/index.html

Scores

EPSS 0.0261
EPSS Percentile 83.4%

Details

CWE
CWE-89
Status published
Products (1)
sysphonic/thetis < 2.2.0
Published Jul 19, 2015
Tracked Since Feb 18, 2026