CVE-2015-10026

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in tiredtyrant flairbot. It has been declared as critical. This vulnerability affects unknown code of the file flair.py. The manipulation leads to sql injection. The patch is identified as 5e112b68c6faad1d4699d02c1ebbb7daf48ef8fb. It is recommended to apply a patch to fix this issue. VDB-217618 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jan 7, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100279.8A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown func CVE-2015-100286.1A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/CVE-2015-100299.8A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file s CVE-2015-10035.0Directory traversal vulnerability in IniNet embeddedWebServer (aka eWebServer) before 2.02 allows remote attackers to read arbitrary files v CVE-2015-100305.3A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/CVE-2015-100319.8A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.ph CVE-2015-100326.1A vulnerability was found in HealthMateWeb. It has been declared as problematic. Affected by this vulnerability is an unknown functionality CVE-2015-100336.5A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade CVE-2015-100349.8A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipul CVE-2015-100359.8A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addT CVE-2015-100369.8A vulnerability was found in kylebebak dronfelipe. It has been declared as critical. Affected by this vulnerability is an unknown functional CVE-2015-100379.8A vulnerability, which was classified as critical, was found in ACI_Escola. This affects an unknown part. The manipulation leads to sql inje