Search/CVE-2015-3427
● CVE

CVE-2015-3427

Vendordebian, quassel-ircProductdebian linux, quasselDiscoveredMay 14, 2015UpdatedMay 6, 2026

Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote attackers to conduct SQL injection attacks via a \ (backslash) in a message. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4422.

View graph Watch Export
CVSS v3.1
—
EPSS
1.99%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 26, 2026
▼ 0.01pp
2.00% → 1.99% over 2 tracked changes
Connections
3 relationships
Timeline
disclosure → media coverage
May 14, 2015
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026