CVE-2015-10020

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the function addUser of the file HeatMapServer/src/com/datformers/servlet/AddAppUser.java. The manipulation leads to sql injection. The name of the patch is 39b495011437a105c7670e17e071f99195b4922e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218380.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
ssn2013	cis450Project	n/a

References

https://github.com/ssn2013/cis450Project/commit/39b495011437a105c7670e17e071f99195b4922ePatch, Third Party Advisory
https://vuldb.com/?ctiid.218380Permissions Required, Third Party Advisory
https://vuldb.com/?id.218380Permissions Required, Third Party Advisory
https://github.com/ssn2013/cis450Project/commit/39b495011437a105c7670e17e071f99195b4922ePatch, Third Party Advisory
https://vuldb.com/?ctiid.218380Permissions Required, Third Party Advisory
https://vuldb.com/?id.218380Permissions Required, Third Party Advisory

Timeline

Published: Jan 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100216.1A vulnerability was found in ritterim definely. It has been classified as problematic. Affected is an unknown function of the file src/datab CVE-2015-100229.8A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of th CVE-2015-100239.8A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/serv CVE-2015-100249.8A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/CVE-2015-100257.5A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown CVE-2015-100269.8A vulnerability was found in tiredtyrant flairbot. It has been declared as critical. This vulnerability affects unknown code of the file fla CVE-2015-100279.8A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown func CVE-2015-100286.1A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/CVE-2015-100299.8A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file s CVE-2015-10035.0Directory traversal vulnerability in IniNet embeddedWebServer (aka eWebServer) before 2.02 allows remote attackers to read arbitrary files v CVE-2015-100305.3A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/CVE-2015-100319.8A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.ph