CVE-2015-10077

Name of the Vulnerable Software and Affected Versions webbuilders-group silverstripe-kapost-bridge version 0.3.3

Description A critical issue has been found, affecting the index/getPreview function of the file code/control/KapostService.php. This issue leads to sql injection and can be launched remotely.

Recommendations For version 0.3.3, upgrade to version 0.4.0 to address this issue. As a temporary workaround, consider disabling the index/getPreview function of the KapostService.php file until the patch is applied. Restrict access to the code/control/KapostService.php file to minimize the risk of exploitation.