CVE-2015-10030

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir leads to pathname traversal. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as d22337d453a2a14194cdb02bf12cdf9d9f827aa7. It is recommended to upgrade the affected component. VDB-217642 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-21 CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Jan 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100319.8A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.ph CVE-2015-100326.1A vulnerability was found in HealthMateWeb. It has been declared as problematic. Affected by this vulnerability is an unknown functionality CVE-2015-100336.5A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade CVE-2015-100349.8A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipul CVE-2015-100359.8A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addT CVE-2015-100369.8A vulnerability was found in kylebebak dronfelipe. It has been declared as critical. Affected by this vulnerability is an unknown functional CVE-2015-100379.8A vulnerability, which was classified as critical, was found in ACI_Escola. This affects an unknown part. The manipulation leads to sql inje CVE-2015-100388.0A vulnerability was found in nym3r0s pplv2. It has been declared as critical. Affected by this vulnerability is an unknown functionality. Th CVE-2015-100398.0A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functionality in the librar CVE-2015-100406.5A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the CVE-2015-100419.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is the function sendCo CVE-2015-100429.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is th