CVE-2015-1423: Jakweb Gecko CMS

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote administrators to execute arbitrary SQL commands via the (1) jak_delete_log[] or (2) ssp parameter to admin/index.php.

Affected products

• Jakweb Gecko CMS: version 2.2 only; version 2.3 only

Published 2015-01-29. Last modified 2026-06-17.