CVE-2015-10040

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is identified as 3faa5deaa509012069afe75cd03c21bda5050a64. It is recommended to apply a patch to fix this issue. VDB-218302 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-74CWE-116

Affected software

No affected versions have been published.

Timeline

Published
Jan 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-100419.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is the function sendCoCVE-2015-100429.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is thCVE-2015-100438.8A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argumenCVE-2015-100449.8A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The manipulation leads to sCVE-2015-100459.8A vulnerability, which was classified as critical, was found in tutrantta project_todolist. Affected is the function getAffectedRows/where/iCVE-2015-100469.8A vulnerability has been found in lolfeedback and classified as critical. Affected by this vulnerability is an unknown functionality. The maCVE-2015-100479.8A vulnerability was found in KYUUBl school-register. It has been classified as critical. This affects an unknown part of the file src/DBManaCVE-2015-100489.8A vulnerability was found in bmattoso desafio_buzz_woody. It has been rated as critical. This issue affects some unknown processing. The manCVE-2015-100496.1A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some uCVE-2015-10052.1IniNet embeddedWebServer (aka eWebServer) before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent attCVE-2015-100509.8A vulnerability was found in brandonfire miRNA_Database_by_PHP_MySql. It has been declared as critical. This vulnerability affects the functCVE-2015-100519.8A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displ
CVE-2015-10040: Medium severity, CVSS 6.5 | Vulnix