Unscored CVE-2015-5648 EUVD-2015-5599GHSA-g9cq-w29x-hvp5

SQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated users to execute arbitrary SQL commands via…

Published Oct 11, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

SQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

References

JVN#02671769 third-party-advisory
https://mail.loenshotel.de/phpRechnung/ChangeLog.php
http://sourceforge.net/projects/phprechnung/files/phpRechnung/1.6.5/phpRechnung_1_6_5.tar.bz2/download
JVNDB-2015-000154 third-party-advisory