CVE-2015-10014

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in arekk uke. This affects an unknown part of the file lib/uke/finder.rb. The manipulation leads to sql injection. The identifier of the patch is 52fd3b2d0bc16227ef57b7b98a3658bb67c1833f. It is recommended to apply a patch to fix this issue. The identifier VDB-217485 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jan 5, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100159.8A vulnerability, which was classified as critical, has been found in glidernet ogn-live. This issue affects some unknown processing. The man CVE-2015-100169.8A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function Datab CVE-2015-100179.8A vulnerability has been found in HPI-Information-Systems ProLOD and classified as critical. This vulnerability affects unknown code. The ma CVE-2015-100189.8A vulnerability has been found in DBRisinajumi d2files and classified as critical. Affected by this vulnerability is the function actionUplo CVE-2015-100196.1A vulnerability, which was classified as problematic, has been found in foxoverflow MySimplifiedSQL. This issue affects some unknown process CVE-2015-10026.4IniNet embeddedWebServer (aka eWebServer) before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via CVE-2015-100209.8A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the function addUser of the f CVE-2015-100216.1A vulnerability was found in ritterim definely. It has been classified as problematic. Affected is an unknown function of the file src/datab CVE-2015-100229.8A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of th CVE-2015-100239.8A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/serv CVE-2015-100249.8A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/CVE-2015-100257.5A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown