Vulnerability Details CVE-2015-6009
Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary SQL commands via (1) the where parameter to rss.php or (2) the sqlQuery parameter to search.php, a different issue than CVE-2015-7382.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 71.5%
CVSS Severity
CVSS v2 Score 7.5
References