Unscored severity · published May 29, 2015
CVE-2015-4137
SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter
–
CVSS
2.5%
EPSS
No
On KEV
Description
SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Milw0rm Clone Script · Milw0rm Project
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4137
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4137
Exploit
http://packetstormsecurity.com/files/131981/Milw0rm-Clone-Script-1.0-SQL-Injection.html
Exploit
http://seclists.org/fulldisclosure/2015/May/76
www.securityfocus.com
http://www.securityfocus.com/bid/74745
www.exploit-db.com
https://www.exploit-db.com/exploits/37248/
More from Milw0rm Clone Script
–
CVE-2015-4658
Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) usr or (2) pwd parameter