CVE-2015-10020

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the function addUser of the file HeatMapServer/src/com/datformers/servlet/AddAppUser.java. The manipulation leads to sql injection. The name of the patch is 39b495011437a105c7670e17e071f99195b4922e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218380.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jan 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-100216.1A vulnerability was found in ritterim definely. It has been classified as problematic. Affected is an unknown function of the file src/databCVE-2015-100229.8A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of thCVE-2015-100239.8A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/servCVE-2015-100249.8A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/CVE-2015-100257.5A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown CVE-2015-100269.8A vulnerability was found in tiredtyrant flairbot. It has been declared as critical. This vulnerability affects unknown code of the file flaCVE-2015-100279.8A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown funcCVE-2015-100286.1A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/CVE-2015-100299.8A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file sCVE-2015-10035.0Directory traversal vulnerability in IniNet embeddedWebServer (aka eWebServer) before 2.02 allows remote attackers to read arbitrary files vCVE-2015-100305.3A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/CVE-2015-100319.8A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.ph
CVE-2015-10020: Critical severity, CVSS 9.8 | Vulnix