system
Describe <CVE-2017-15949>.
user
What is <CVE-2017-15949>?
assistant
Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the log_id parameter to admin/editgroup.php..