CVE-2015-6944

Name of the Vulnerable Software and Affected Versions JSP/MySQL Administrador Web version 1

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack user authentication for requests that execute arbitrary SQL commands. This is achieved via the cmd parameter to the "sys/sys/listaBD2.jsp" endpoint.

Recommendations For JSP/MySQL Administrador Web version 1, consider restricting access to the "sys/sys/listaBD2.jsp" endpoint to minimize the risk of exploitation. Avoid using the cmd parameter in this endpoint until the issue is resolved.