CVE-2013-10019

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

A vulnerability was found in OCLC-Research OAICat 1.5.61. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The attack may be initiated remotely. Upgrading to version 1.5.62 is able to address this issue. The identifier of the patch is 6cc65501869fa663bcd24a70b63f41f5cfe6b3e1. It is recommended to upgrade the affected component. The identifier VDB-221489 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
OCLC-Research	OAICat	1.5.61

References

https://code.google.com/archive/p/oaicat/issues/7Issue Tracking, Vendor Advisory
https://github.com/OCLC-Research/oaicat/commit/6cc65501869fa663bcd24a70b63f41f5cfe6b3e1Patch
https://oaicat.googlecode.com/files/oaicat-1.5.62.tar.gzRelease Notes
https://vuldb.com/?ctiid.221489Permissions Required, Third Party Advisory
https://vuldb.com/?id.221489Third Party Advisory
https://code.google.com/archive/p/oaicat/issues/7Issue Tracking, Vendor Advisory
https://github.com/OCLC-Research/oaicat/commit/6cc65501869fa663bcd24a70b63f41f5cfe6b3e1Patch
https://oaicat.googlecode.com/files/oaicat-1.5.62.tar.gzRelease Notes
https://vuldb.com/?ctiid.221489Permissions Required, Third Party Advisory
https://vuldb.com/?id.221489Third Party Advisory

Timeline

Published: Feb 20, 2023
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-10029.3WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (me CVE-2013-100206.1A vulnerability, which was classified as problematic, was found in MMDeveloper A Forms Plugin up to 1.4.2 on WordPress. This affects an unkn CVE-2013-100216.1A vulnerability was found in dd32 Debug Bar Plugin up to 0.8 on WordPress. It has been declared as problematic. Affected by this vulnerabili CVE-2013-100226.1A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this CVE-2013-100239.8A vulnerability was found in Editorial Calendar Plugin up to 2.6 on WordPress. It has been declared as critical. Affected by this vulnerabil CVE-2013-100247.5A vulnerability has been found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this vulnerability is an CVE-2013-100258.8A vulnerability was found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this issue is the function ex CVE-2013-100266.1A vulnerability, which was classified as problematic, has been found in Mail Subscribe List Plugin up to 2.0.10 on WordPress. This issue aff CVE-2013-100278.8A vulnerability was found in Blogger Importer Plugin up to 0.5 on WordPress. It has been classified as problematic. Affected is the function CVE-2013-100286.1A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress. It has been rated as problematic. Affected by this issue is the functi CVE-2013-100298.8A vulnerability classified as problematic was found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this vulnerability is the f CVE-2013-10039.3WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (me