CVE-2015-2956

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.29%

Published

Jun 13, 2015

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Weaknesses (CWE)

CWE-89

Affected Products (3)

igreks · milkystep_lightvulnerable

igreks · milkystep_professionalvulnerable

igreks · milkystep_professional_oemvulnerable

References (8)

http://jvn.jp/en/jp/JVN52478686/995646/index.html

http://jvn.jp/en/jp/JVN52478686/index.html

Vendor Advisory

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000081

Vendor Advisory

http://www.securityfocus.com/bid/75076

http://jvn.jp/en/jp/JVN52478686/995646/index.html

http://jvn.jp/en/jp/JVN52478686/index.html

Vendor Advisory

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000081

Vendor Advisory

http://www.securityfocus.com/bid/75076

KEV Catalog EPSS Scores Vendors All CVEs