CVE-2015-1000011

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Blind SQL Injection in wordpress plugin dukapress v2.5.9

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Oct 6, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-10000127.5Local File Inclusion Vulnerability in mypixs v0.3 wordpress pluginCVE-2015-10000137.8Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1CVE-2015-100014.3The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputtingCVE-2015-100025.5A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressiCVE-2015-100034.3A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the componCVE-2015-100047.5Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low CVE-2015-100057.5A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/cCVE-2015-100066.1A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionaCVE-2015-100076.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by this issue is some uCVE-2015-100089.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This affects an unknown paCVE-2015-100099.8A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getContent of the file aCVE-2015-100110.0Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary c
CVE-2015-1000011: Critical severity, CVSS 9.8 | Vulnix