CVE-2015-10064

CVE-2015-10064 affects VictorFerraresi’s pokemon-database-php . The vulnerability is a SQL injection in an unknown functionality, described as critical. The patch to fix this issue is named dd0e1e6cdf648d6a3deff441f515bcb1d7573d68 . Connected documents confirm the affected software and the remedi...

CVE-2015-10063

CVE-2015-10063 affects saemorris TheRadSystem, specifically the redirect function in login.php where manipulation of the user/pass parameters enables SQL injection. Impact is remote exploitation with the possibility of unauthorized access or data exposure. A patch is identified by bfba26bd34af316...

CVE-2015-10063 saemorris TheRadSystem _login.php redirect sql injection

A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect of the file login.php. The manipulation of the argument user/pass leads to sql injection. The attack may be initiated remotely. The identifier of the patch is...

CVE-2015-10062

The CVE-2015-10062 entry relates to galaxy-data-resource up to version 14.10.0, with an injection vulnerability in the Command Line Template component caused by manipulation of an unspecified part. A fix is available: upgrade to version 14.10.1. A patch hash is provided (50d65f45d3f5be5d1fbff2e45...

CVE-2015-10061

creationtimestamp| type| source ---|---|--- 2023-01-17 18:23:49+00:00| seen| https://t.me/cibsecurity/56592...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2015-0899)

Summary WebSphere Application Server is shipped with IBM Tivoli System Automation Application Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

CVE-2015-10059

creationtimestamp| type| source ---|---|--- 2023-01-17 16:50:52+00:00| seen| https://t.me/cibsecurity/56586...

CVE-2015-10058

creationtimestamp| type| source ---|---|--- 2023-01-17 16:26:32+00:00| seen| https://t.me/cibsecurity/56585...

CVE-2015-10060

creationtimestamp| type| source ---|---|--- 2023-01-17 16:26:30+00:00| seen| https://t.me/cibsecurity/56583...

CVE-2015-10061

CVE-2015-10061 describes a SQL injection in evandro-machado Trabalho-Web2, specifically in an unknown part of the file src/java/br/com/magazine/dao/ClienteDAO.java. The vulnerability is categorized as critical (CVSS 3.1 base score 9.8 in NVD data). The root cause is improper handling of input lea...

CVE-2015-10060

A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing of the file Data/views.py. The manipulation of the argument id1/id2 leads to sql injection. The identifier of the patch is 829a027aca7c17f5a7ec1addca8dd5d5542f86ac. It is...

CVE-2015-10060

CVE-2015-10060 affects the MNBikeways database. The vulnerability is a SQL injection in the processing of Data/views.py caused by manipulating the id1/id2 parameters. A patch with hash 829a027aca7c17f5a7ec1addca8dd5d5542f86ac exists. Connected sources confirm this issue and its patch; no exploita...

CVE-2015-10059 s134328 Webapplication-Veganguide apiService.js cross site scripting

A vulnerability has been found in s134328 Webapplication-Veganguide and classified as problematic. This vulnerability affects unknown code of the file p05-integration/app/shared/api/apiService.js. The manipulation of the argument country/city leads to cross site scripting. The attack can be...

CVE-2015-10059

CVE-2015-10059 affects the s134328 Webapplication-Veganguide. The vulnerability resides in the file p05-integration/app/shared/api/apiService.js where manipulating the country/city argument can trigger cross-site scripting. The issue is exploitable remotely, per the records. A patch is available:...

CVE-2015-10058 Wikisource Category Browser index.php cross site scripting

A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. The manipulation of the argument lang leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named...

CVE-2015-10054

creationtimestamp| type| source ---|---|--- 2023-01-17 00:23:02+00:00| seen| https://t.me/cibsecurity/56559...

CVE-2015-10055

creationtimestamp| type| source ---|---|--- 2023-01-16 20:23:52+00:00| seen| https://t.me/cibsecurity/56560...

CVE-2015-10057

A vulnerability (CVE-2015-10057) affects Little Apps Little Software Stats, specifically the Password Reset Handler component inc/class.securelogin.php. The issue is an improper access control in that file, leading to potential unauthorized access. The documented exploitability is described as di...

CVE-2015-10056

CVE-2015-10056 affects vinylmap version 2071174A, specifically the contact function in recordstoreapp/views.py, where input handling leads to SQL injection. The vulnerability is tied to the patch named b07b79a1e92cc62574ba0492cce000ef4a7bd25f, and several sources recommend applying this patch to ...

CVE-2015-10055 PictureThisWebServer user.js router.post sql injection

A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes/user.js. The manipulation of the argument username/password leads to sql injection. The patch is named 68b9dc346e88b494df00d88c7d058e96820e1479. It is...