CVE-2015-1400

Name of the Vulnerable Software and Affected Versions NPDS Revolution version 13

Description A SQL injection issue exists in the search.php file, allowing remote attackers to execute arbitrary SQL commands by manipulating the query parameter in the "/search.php" endpoint.

Recommendations For NPDS Revolution version 13, consider restricting access to the search.php file or validating and sanitizing the query parameter to prevent SQL injection attacks. As a temporary workaround, avoid using the query parameter in the search functionality until a patch is available.