CVE-2015-7382
SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6...
CVE-2015-7382 is a high vulnerability (CVSS 7.5) in Refbase, published September 28, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. No source names a fixed version.
SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009.
- Record
CVE-2015-7382- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009.
- Record
CVE-2015-7382- Updated
- 2026-11-02
EUVDEUVD-2015-7306 No score
SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009.
- Record
EUVD-2015-7306- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-87gv-frhh-fq7g No score
SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6...
SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009.
- Record
GHSA-87gv-frhh-fq7g- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | refbase 0.9.6 - Multiple Vulnerabilities | 2015-09-23 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |