Unrated severityNVD Advisory· Published Feb 4, 2015· Updated Jun 17, 2026

CVE-2015-1476

Description

Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the (1) productbycat parameter to product.php, or (2) username or (3) password parameter to __admin/index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xlinkerz/ecommerceMajorllm-create
Ecommercemajor Project/Ecommercemajor
cpe:2.3:a:ecommercemajor_project:ecommercemajor:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/130073/ecommerceMajor-SQL-Injection.htmlnvdExploit
www.exploit-db.com/exploits/35878nvdExploit
osvdb.org/show/osvdb/117569nvd
osvdb.org/show/osvdb/117570nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000