CVE-2015-10022

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file scripts/etl/custom_import.pl. The manipulation leads to sql injection. The identifier of the patch is 8bdb6fcf7209584eaf1232437f0f53e735b2b34c. It is recommended to apply a patch to fix this issue. The identifier VDB-217609 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
IISH	nlgis2	n/a

References

https://github.com/IISH/nlgis2/commit/8bdb6fcf7209584eaf1232437f0f53e735b2b34cPatch, Third Party Advisory
https://vuldb.com/?ctiid.217609Permissions Required, Third Party Advisory
https://vuldb.com/?id.217609Permissions Required, Third Party Advisory
https://github.com/IISH/nlgis2/commit/8bdb6fcf7209584eaf1232437f0f53e735b2b34cPatch, Third Party Advisory
https://vuldb.com/?ctiid.217609Permissions Required, Third Party Advisory
https://vuldb.com/?id.217609Permissions Required, Third Party Advisory

Timeline

Published: Jan 7, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100239.8A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/serv CVE-2015-100249.8A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/CVE-2015-100257.5A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown CVE-2015-100269.8A vulnerability was found in tiredtyrant flairbot. It has been declared as critical. This vulnerability affects unknown code of the file fla CVE-2015-100279.8A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown func CVE-2015-100286.1A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/CVE-2015-100299.8A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file s CVE-2015-10035.0Directory traversal vulnerability in IniNet embeddedWebServer (aka eWebServer) before 2.02 allows remote attackers to read arbitrary files v CVE-2015-100305.3A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/CVE-2015-100319.8A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.ph CVE-2015-100326.1A vulnerability was found in HealthMateWeb. It has been declared as problematic. Affected by this vulnerability is an unknown functionality CVE-2015-100336.5A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade