Redaxscript · Redaxscript · CVE-2015-1518
**Name of the Vulnerable Software and Affected Versions**
Redaxscript versions prior to 2.3.0
**Description**
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `search terms` parameter in the `search post` function, located in includes/search.php.
**Recommendations**
For versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `search post` function in includes/search.php to minimize the risk of exploitation. Avoid using the `search terms` parameter in the affected function until the issue is resolved.