CVE-2015-2237

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.40%

Published

Mar 12, 2015

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBPHP Betoffice (Betster) 1.0.4 - Authentication Bypass / SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) showprofile.php or (2) categoryedit.php or (3) username parameter in a login to index.php.

Weaknesses (CWE)

CWE-89

Affected Products (1)

betster_project · betstervulnerable

References (6)

http://packetstormsecurity.com/files/130696/Betster-1.0.4-SQL-Injection-Authentication-Bypass.html

Exploit

http://www.securityfocus.com/archive/1/534816/100/0/threaded

https://www.exploit-db.com/exploits/36306/

http://packetstormsecurity.com/files/130696/Betster-1.0.4-SQL-Injection-Authentication-Bypass.html

Exploit

http://www.securityfocus.com/archive/1/534816/100/0/threaded

https://www.exploit-db.com/exploits/36306/

KEV Catalog EPSS Scores Vendors All CVEs