CVE-2015-1467
fork-cms fork cms: no CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days.
Multiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) language[] or (2) type[] parameter to private/en/locale/index.
- EPSS
- 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fork-cms:fork_cms
References
- http://packetstormsecurity.com/files/130242/Fork-CMS-3.8.5-SQL-Injection.html
- http://www.fork-cms.com/blog/detail/fork-3.8.6-released
- http://www.securityfocus.com/archive/1/534616/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100668
- http://packetstormsecurity.com/files/130242/Fork-CMS-3.8.5-SQL-Injection.html