35976 matches found
CVE-2015-10055
Affected software/area: PictureThisWebServer, in the router.post handler of routes/user.js. Issue: SQL injection caused by manipulation of the arguments username/password. Impact (as stated): critical vulnerability with potential high confidentiality, integrity, and availability impact. Root caus...
CVE-2015-10054 githuis P2Manage Database.cs Execute sql injection
A vulnerability, which was classified as critical, was found in githuis P2Manage. This affects the function Execute of the file PTwoManage/Database.cs. The manipulation of the argument sql leads to sql injection. The identifier of the patch is 717380aba80002414f82d93c770035198b7858cc. It is...
CVE-2015-10054
CVE-2015-10054 affects githuis P2Manage; vulnerability in Execute (PTwoManage/Database.cs) where manipulation of the sql argument leads to SQL injection. A patch identified as 717380aba80002414f82d93c770035198b7858cc is recommended. Other sources (PRION, NVD, RH, CVE-list, PT Security/PT-2023-102...
CVE-2015-10053
CVE-2015-10053 affects prodigasistemas curupira up to 0.1.3. The vulnerability lies in an unknown function within the file app/controllers/curupira/passwords_controller.rb , whose manipulation enables a SQL injection . A fix is available in version 0.1.4 , with patch hash 93a9a77896bb66c949acb8e6...
CVE-2015-10050
creationtimestamp| type| source ---|---|--- 2023-01-15 23:29:46+00:00| seen| https://t.me/cibsecurity/56519...
CVE-2015-10051
creationtimestamp| type| source ---|---|--- 2023-01-15 20:13:10+00:00| seen| https://t.me/cibsecurity/56518...
CVE-2015-10049
creationtimestamp| type| source ---|---|--- 2023-01-15 20:13:09+00:00| seen| https://t.me/cibsecurity/56517...
CVE-2015-10052
CVE-2015-10052 affects calesanz gibb-modul-151, with a vulnerability in the bearbeiten/login function that enables an open redirect. The issue is exploitable remotely and is tied to the patch 88a517dc19443081210c804b655e72770727540d. Several sources (NVD, Red Hat, CVE listings, and related databa...
CVE-2015-10051 bony2023 Discussion-Board main.php display_all_replies sql injection
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...
CVE-2015-10051
CVE-2015-10051 affects the bony2023 Discussion-Board. The vulnerability is in the function display_all_replies (functions/main.php) where manipulating the str argument enables SQL injection. A patch is identified as 26439bc4c63632d63ba89ebc0f149b25a9010361, and applying this patch is recommended....
CVE-2015-10051 bony2023 Discussion-Board main.php display_all_replies sql injection
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...
CVE-2015-10050
CVE-2015-10050 affects brandonfire miRNA_Database_by_PHP_MySql. A SQL injection arises in inc/model.php functions __construct, select_single_rna, and count_rna. Root cause: input handling in these functions allows injection via network access. Impact stated as critical; exact exploitation details...
CVE-2015-10049
The CVE-2015-10049 entry describes a Cross-Site Scripting vulnerability in Overdrive Eletrônica course-builder, affecting versions up to 1.7.x. The issue involves unknown functionality in the file coursebuilder/modules/oeditor/oeditor.html being manipulated to trigger XSS, with remote exploit via...
CVE-2015-10048
CVE-2015-10048 affects the bmattoso desafio_buzz_woody application. The issue is a SQL injection vulnerability caused by processing that allows manipulation of SQL queries. The vulnerability is rated critical in the initial description with CVSS 3.1/3.0 metrics showing high impact on confidential...
CVE-2015-10047
KYUUBl school-register contains a SQL injection vulnerability in an unknown part of src/DBManager.java (CVE-2015-10047). The issue is described as critical with high impact to confidentiality, integrity, and availability. A patch identified as commit 1cf7e01b878aee923f2b22cc2535c71a680e4c30 is re...
CVE-2015-10046
CVE-2015-10046 involves the lolfeedback app and is classified as critical (CVSSv3.1: 9.8). The vulnerability arises from an input-handling flaw in an unknown functionality, allowing an attacker to perform a SQL injection . The affected software is identified as lolfeedback, with patching informat...
CVE-2015-10045 tutrantta project_todolist Database.php update sql injection
A vulnerability, which was classified as critical, was found in tutrantta projecttodolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. ...
CVE-2015-10045
CVE-2015-10045 affects the tutrantta project_todolist, specifically the library/Database.php function getAffectedRows/where/insert/update. The issue is a SQL injection vulnerability reported as critical. A patch named 194a0411bbe11aa4813f13c66b9e8ea403539141 is recommended to fix the issue. Publi...
CVE-2015-10044
CVE-2015-10044 affects the open-source tool gophergala sqldump . The vulnerability is a SQL injection in unknown code paths, classified as critical with a CVSSv3.1 base score of 9.8 (Network attack, no authentication, user interaction not required; impact to confidentiality, integrity, and availa...