VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 12, 2015· Updated Jun 17, 2026

CVE-2015-2237

CVE-2015-2237

Description

Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) showprofile.php or (2) categoryedit.php or (3) username parameter in a login to index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Betster Project/Betster2 versions
    cpe:2.3:a:betster_project:betster:1.0.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:betster_project:betster:1.0.4:*:*:*:*:*:*:*
    • (no CPE)range: = 1.0.4

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.