CVE-2015-10006

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is 9d18a39944d79dfedacd754a742df38f99d3c0e2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217172.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
admont28	Ingnovarq	n/a

References

https://github.com/admont28/ingnovarq/commit/9d18a39944d79dfedacd754a742df38f99d3c0e2Patch, Third Party Advisory
https://vuldb.com/?ctiid.217172Third Party Advisory
https://vuldb.com/?id.217172Third Party Advisory
https://github.com/admont28/ingnovarq/commit/9d18a39944d79dfedacd754a742df38f99d3c0e2Patch, Third Party Advisory
https://vuldb.com/?ctiid.217172Third Party Advisory
https://vuldb.com/?id.217172Third Party Advisory

Timeline

Published: Jan 1, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100076.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by this issue is some u CVE-2015-100089.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This affects an unknown pa CVE-2015-100099.8A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getContent of the file a CVE-2015-100110.0Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary c CVE-2015-100106.1A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file r CVE-2015-100119.8A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoi CVE-2015-100127.5** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rated as problematic. A CVE-2015-100136.1A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affecte CVE-2015-100149.8A vulnerability classified as critical has been found in arekk uke. This affects an unknown part of the file lib/uke/finder.rb. The manipula CVE-2015-100159.8A vulnerability, which was classified as critical, has been found in glidernet ogn-live. This issue affects some unknown processing. The man CVE-2015-100169.8A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function Datab CVE-2015-100179.8A vulnerability has been found in HPI-Information-Systems ProLOD and classified as critical. This vulnerability affects unknown code. The ma