K2 Smartforms

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-7299 HIGH POC This Week

SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackers to execute arbitrary SQL commands via the xml parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Microsoft K2 Blackpearl K2 For Sharepoint K2 Smartforms

NVD

CVSS 2.0

7.5

EPSS

0.5%

CVE-2015-7299

EPSS 1% CVSS 7.5

HIGH POC This Week

SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackers to execute arbitrary SQL commands via the xml parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Microsoft K2 Blackpearl +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy