CVE-2015-3423

Multiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) ctrl, (2) h____%2427, (3) h____%2439, (4) param0, (5) param1, (6) param2, (7) param3, (8) param4, (9) filter_INSERT_COUNT, (10) filter_MINOR_FALLOUT, (11) filter_UPDATE_COUNT, (12) sort, or (13) sessid parameter.

• CWE-89

• http://packetstormsecurity.com/files/132808/NetCracker-Resource-Management-System-8.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/archive/1/536054/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/132808/NetCracker-Resource-Management-System-8.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/archive/1/536054/100/0/threadedBroken Link, Third Party Advisory, VDB Entry

Published

Feb 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3417Use-after-free vulnerability in the ff_h264_free_tables func…
• CVE-2015-3418The ProcPutImage function in dix/dispatch.c in X.Org Server …
• CVE-2015-3419vBulletin 5.x through 5.1.6 allows remote authenticated user…
• CVE-2015-3420The ssl-proxy-openssl.c function in Dovecot before 2.2.17, w…
• CVE-2015-3421The eshop_checkout function in checkout.php in the Wordpress…
• CVE-2015-3422Cross-site scripting (XSS) vulnerability in SearchBlox befor…
• CVE-2015-3424SQL injection vulnerability in Accentis Content Resource Man…8.8
• CVE-2015-3425Cross-site scripting (XSS) vulnerability in Accentis Content…6.1
• CVE-2015-3427Quassel before 0.12.2 does not properly re-initialize the da…
• CVE-2015-3429Cross-site scripting (XSS) vulnerability in example.html in …
• CVE-2015-3431Pydio (formerly AjaXplorer) before 6.0.7 allows remote attac…
• CVE-2015-3432Multiple cross-site scripting (XSS) vulnerabilities in Pydio…