CVE-2015-1471

Name of the Vulnerable Software and Affected Versions Pragyan CMS version 3.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the userprofile.lib.php file, specifically via the user parameter to the default URI.

Recommendations For Pragyan CMS version 3.0, consider restricting access to the userprofile.lib.php file until a patch is available. As a temporary workaround, avoid using the user parameter in the default URI to minimize the risk of exploitation.