Unrated severityNVD Advisory· Published Oct 21, 2015· Updated May 6, 2026

CVE-2015-7299

Description

SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackers to execute arbitrary SQL commands via the xml parameter.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.com/files/133953/K2-SmartForms-BlackPearl-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
www.securityfocus.com/archive/1/536673/100/0/threadednvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000