CVE-2015-10033

creationtimestamp| type| source ---|---|--- 2023-01-10 00:27:52+00:00| seen| https://t.me/cibsecurity/56179...

CVE-2015-10035

creationtimestamp| type| source ---|---|--- 2023-01-10 00:27:51+00:00| seen| https://t.me/cibsecurity/56178...

CVE-2015-10034

creationtimestamp| type| source ---|---|--- 2023-01-10 00:27:48+00:00| seen| https://t.me/cibsecurity/56175...

CVE-2015-10034

CVE-2015-10034 affects j-nowak workout-organizer . The vulnerability arises from an unspecified part of the code, resulting in a SQL injection . The CVE entry lists a patch: the patch hash 13cd6c3d1210640bfdb39872b2bb3597aa991279 and recommends applying it. Various connected sources (Red Hat, CVE...

CVE-2015-10033

The CVE-2015-10033 entry concerns jvvlee MerlinsBoard, specifically the Grade Handler component. A vulnerability in an unknown portion of Grade Handler allows improper authorization. The patch identifier 134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5 is cited as a fix, and applying the patch is recomme...

CVE-2015-10032

CVE-2015-10032 affects HealthMateWeb, specifically the createaccount.php file where manipulating parameters such as username, password, first_name, last_name, company, or phone triggers a cross-site scripting vulnerability. The root cause is input handling allowing XSS, and the vulnerability can ...

CVE-2015-10032 HealthMateWeb createaccount.php cross site scripting

A vulnerability was found in HealthMateWeb. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file createaccount.php. The manipulation of the argument username/password/firstname/lastname/company/phone leads to cross site scripting. The attack...

CVE-2015-10031

The CVE-2015-10031 issue affects purpleparrots 491-Project, specifically the Highscore Handler’s update.php where unknown code execution leads to SQL injection. This is documented as a critical vulnerability with a patch named a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab. According to the connected s...

CVE-2015-10031 purpleparrots 491-Project Highscore update.php sql injection

A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.php of the component Highscore Handler. The manipulation leads to sql injection. The name of the patch is a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab. It is...

CVE-2015-10031 purpleparrots 491-Project Highscore update.php sql injection

A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.php of the component Highscore Handler. The manipulation leads to sql injection. The name of the patch is a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab. It is...

CVE-2015-10030

creationtimestamp| type| source ---|---|--- 2023-01-08 15:34:19+00:00| seen| https://t.me/cibsecurity/56130...

CVE-2015-10030

CVE-2015-10030 affects SUKOHI Surpass (Surpass.php) with a pathname traversal in the dir parameter. All connected sources confirm this vulnerability exists in versions prior to 1.0.0. Upgrading to 1.0.0 addresses the issue (patch d22337d453a2a14194cdb02bf12cdf9d9f827aa7; VDB-217642). Documented i...

CVE-2015-10028

creationtimestamp| type| source ---|---|--- 2023-01-07 22:26:13+00:00| seen| https://t.me/cibsecurity/56126...

CVE-2015-10029

creationtimestamp| type| source ---|---|--- 2023-01-07 22:26:10+00:00| seen| https://t.me/cibsecurity/56123...

CVE-2015-10029 kelvinmo simplexrd simplexrd.class.php xml external entity reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is...

CVE-2015-10029

The CVE-2015-10029 issue affects kelvinmo simplexrd up to version 3.1.0, due to a flaw in simplexrd.class.php that allows XML External Entity (XXE) processing. This can enable manipulation via crafted XML inputs and is addressed by upgrading to version 3.1.1. The patch is identified as 4c9f2e0285...

CVE-2015-10028

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2015-10028 ss15-this-is-sparta Main Page roomElement.js cross site scripting

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2015-10028

CVE-2015-10028 concerns the ss15-this-is-sparta project, specifically the Main Page component’s file js/roomElement.js . The available documents describe a cross-site scripting (XSS) vulnerability arising from manipulation of that file, with exploitation described as remote. The patch identified ...

CVE-2015-10027

A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown functionality of the component Username Handler. The manipulation leads to ldap injection. Upgrading to version 2.0b1 is able to address this issue. The patch is...