CVE-2015-7382

SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009.

• CWE-89

• http://www.kb.cert.org/vuls/id/374092Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/374092Third Party Advisory, US Government Resource

Published

Sep 28, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7375Schneider Electric InduSoft Web Studio before 8.0 allows rem…
• CVE-2015-7377Cross-site scripting (XSS) vulnerability in pie-register/pie…
• CVE-2015-7378Panda Security URL Filtering before 4.3.1.9 uses a weak ACL …7.8
• CVE-2015-7379Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7380Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7381Multiple PHP remote file inclusion vulnerabilities in instal…
• CVE-2015-7383Multiple cross-site scripting (XSS) vulnerabilities in Web R…
• CVE-2015-7384Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to c…
• CVE-2015-7385Cross-site scripting (XSS) vulnerability in Open-Xchange OX …
• CVE-2015-7386Multiple cross-site scripting (XSS) vulnerabilities in inclu…
• CVE-2015-7387ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and ear…
• CVE-2015-7390SQL injection vulnerability in TestLink before 1.9.14 allows…