Feed/CVE-2017-15875
CVE-2017-15875CRITICALCVSS 9.8

CVE-2017-15875

Published Dec 18, 2017·Updated Jun 16, 2026

NVD Description

SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free