CVE-2015-10029

The CVE-2015-10029 issue affects kelvinmo simplexrd up to version 3.1.0, due to a flaw in simplexrd.class.php that allows XML External Entity (XXE) processing. This can enable manipulation via crafted XML inputs and is addressed by upgrading to version 3.1.1. The patch is identified as 4c9f2e0285...

CVE-2015-10028

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2015-10028 ss15-this-is-sparta Main Page roomElement.js cross site scripting

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2015-10028

CVE-2015-10028 concerns the ss15-this-is-sparta project, specifically the Main Page component’s file js/roomElement.js . The available documents describe a cross-site scripting (XSS) vulnerability arising from manipulation of that file, with exploitation described as remote. The patch identified ...

CVE-2015-10027

A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown functionality of the component Username Handler. The manipulation leads to ldap injection. Upgrading to version 2.0b1 is able to address this issue. The patch is...

CVE-2015-10027

CVE-2015-10027 affects hydrian TTRSS-Auth-LDAP's Username Handler, with LDAP injection in unknown functionality prior to 2.0b1. Upgrading to version 2.0b1 addresses the issue; the patch is identified as a7f7a5a82d9202a5c40d606a5c519ba61b224eb8 (VDB-217622). Multiple connected sources corroborate ...

CVE-2015-10025

CVE-2015-10025 affects the luelista miniConf product lineage up to version 1.7.6. The vulnerability targets an unknown functionality in the file miniConf/MessageView.cs within the URL Scanning component, causing a denial of service when exploited. Upgrading to versions 1.7.7 or 1.8.0 addresses th...

CVE-2015-10024

CVE-2015-10024 concerns hoffie larasync. A path traversal flaw exists in the file repository/content/file_storage.go . The vulnerability, described across multiple sources, indicates manipulation leading to directory traversal with high-severity impact. Patch identifier: 776bad422f4bd4930d0949171...

CVE-2015-10024 hoffie larasync file_storage.go path traversal

A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/filestorage.go. The manipulation leads to path traversal. The name of the patch is 776bad422f4bd4930d09491711246bbeb1be9ba5. It is recommended to apply a pat...

CVE-2015-10019

creationtimestamp| type| source ---|---|--- 2023-01-07 12:25:44+00:00| seen| https://t.me/cibsecurity/56112...

CVE-2015-10022

A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file scripts/etl/customimport.pl. The manipulation leads to sql injection. The identifier of the patch is 8bdb6fcf7209584eaf1232437f0f53e735b2b34c. It is...

CVE-2015-10023

CVE-2015-10023 affects Fumon trello-octometric, specifically the main function in metrics-ui/server/srv.go. The issue is a SQL injection resulting from manipulation of the num argument. A patch is available (commit a1f1754933fbf21e2221fbc671c81a47de6a04ef) and is recommended to fix the issue. Con...

CVE-2015-10022

CVE-2015-10022 affects IISH nlgis2, targeting the unknown functionality in the file scripts/etl/custom_import.pl . The vulnerability allows an attack that leads to SQL injection . A patch is identified by the patch hash 8bdb6fcf7209584eaf1232437f0f53e735b2b34c and a vulnerability identifier VDB-2...

CVE-2015-10022 IISH nlgis2 custom_import.pl sql injection

A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file scripts/etl/customimport.pl. The manipulation leads to sql injection. The identifier of the patch is 8bdb6fcf7209584eaf1232437f0f53e735b2b34c. It is...

CVE-2015-10021

CVE-2015-10021 affects the open source project ritterim definely. A vulnerability in an unknown function of src/database.js allows cross-site scripting, with the attack describable as remotely launchable. The patch named b31a022ba4d8d17148445a13ebb5a42ad593dbaa is recommended/identified as the fi...

CVE-2015-10019 foxoverflow MySimplifiedSQL MySimplifiedSQL_Examples.php cross site scripting

A vulnerability, which was classified as problematic, has been found in foxoverflow MySimplifiedSQL. This issue affects some unknown processing of the file MySimplifiedSQLExamples.php. The manipulation of the argument FirstName/LastName leads to cross site scripting. The attack may be initiated...

CVE-2015-10019

CVE-2015-10019 affects foxoverflow MySimplifiedSQL, specifically the MySimplifiedSQL_Examples.php handling. The vulnerability is a cross-site scripting flaw caused by manipulation of the FirstName/LastName arguments, with the attack potentially initiated remotely. A patch is available (hash 3b748...

CVE-2015-10019 foxoverflow MySimplifiedSQL MySimplifiedSQL_Examples.php cross site scripting

A vulnerability, which was classified as problematic, has been found in foxoverflow MySimplifiedSQL. This issue affects some unknown processing of the file MySimplifiedSQLExamples.php. The manipulation of the argument FirstName/LastName leads to cross site scripting. The attack may be initiated...

CVE-2015-10018

creationtimestamp| type| source ---|---|--- 2023-01-06 16:20:09+00:00| seen| https://t.me/cibsecurity/56042...

CVE-2015-10018

DBRisinajumi d2files has a SQL injection vulnerability in the file and function controllers/D2filesController.php: actionUpload/actionDownloadFile . The issue affects versions prior to 1.0.0 and is addressed by upgrading to 1.0.0 (patch id b5767f2ec9d0f3cbfda7f13c84740e2179c90574 ). Several sourc...