CVE-2015-10029

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is identified as 4c9f2e028523ed705b555eca2c18c64e71f1a35d. It is recommended to upgrade the affected component. VDB-217630 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-611

Affected software

Vendor	Product	Versions
kelvinmo	simplexrd	3.0; 3.1

References

https://github.com/kelvinmo/simplexrd/commit/4c9f2e028523ed705b555eca2c18c64e71f1a35dPatch, Third Party Advisory
https://github.com/kelvinmo/simplexrd/releases/tag/v3.1.1Release Notes, Third Party Advisory
https://vuldb.com/?ctiid.217630Permissions Required, Third Party Advisory
https://vuldb.com/?id.217630Permissions Required, Third Party Advisory
https://github.com/kelvinmo/simplexrd/commit/4c9f2e028523ed705b555eca2c18c64e71f1a35dPatch, Third Party Advisory
https://github.com/kelvinmo/simplexrd/releases/tag/v3.1.1Release Notes, Third Party Advisory
https://vuldb.com/?ctiid.217630Permissions Required, Third Party Advisory
https://vuldb.com/?id.217630Permissions Required, Third Party Advisory

Timeline

Published: Jan 7, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-10035.0Directory traversal vulnerability in IniNet embeddedWebServer (aka eWebServer) before 2.02 allows remote attackers to read arbitrary files v CVE-2015-100305.3A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/CVE-2015-100319.8A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.ph CVE-2015-100326.1A vulnerability was found in HealthMateWeb. It has been declared as problematic. Affected by this vulnerability is an unknown functionality CVE-2015-100336.5A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade CVE-2015-100349.8A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipul CVE-2015-100359.8A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addT CVE-2015-100369.8A vulnerability was found in kylebebak dronfelipe. It has been declared as critical. Affected by this vulnerability is an unknown functional CVE-2015-100379.8A vulnerability, which was classified as critical, was found in ACI_Escola. This affects an unknown part. The manipulation leads to sql inje CVE-2015-100388.0A vulnerability was found in nym3r0s pplv2. It has been declared as critical. Affected by this vulnerability is an unknown functionality. Th CVE-2015-100398.0A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functionality in the librar CVE-2015-100406.5A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the