CVE-2015-2972
sysphonic thetis: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days.
Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sysphonic:thetis
References
- http://jvn.jp/en/jp/JVN19011483/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000099
- http://sysphonic.com/en/thetis/THETIS-SEC-001.html
- https://github.com/sysphonic/thetis/commit/1b8234706e1294f41df42f3d1ccb71b983ffbe23
- https://github.com/sysphonic/thetis/commit/4ca3f5f486759660b87d7c146f1fdc11264f56eb