CVE-2015-6537
CRITICALEpiphany Cardio Server 3.3 - SQL Injection via Login Page URL Parameter
Title source: llmDescription
SQL injection vulnerability in the login page in Epiphany Cardio Server 3.3 allows remote attackers to execute arbitrary SQL commands via a crafted URL.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.epiphanyhealthdata.com/blog/certresponse
Third Party Advisory, US Government Resource third-party-advisory
x_refsource_cert-vn
https://www.kb.cert.org/vuls/id/630239
Scores
CVSS v3
9.8
EPSS
0.0152
EPSS Percentile
71.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
epiphanyhealthdata/cardio_server
3.3
Published
Dec 27, 2015
Tracked Since
Feb 18, 2026