CVE-2015-10041

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is the function sendComments of the file site/procedures.php. The manipulation of the argument text leads to sql injection. The name of the patch is e3aa4d0900167641d41cbccf53909229f00381c9. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218304. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jan 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100429.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is th CVE-2015-100438.8A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argumen CVE-2015-100449.8A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The manipulation leads to s CVE-2015-100459.8A vulnerability, which was classified as critical, was found in tutrantta project_todolist. Affected is the function getAffectedRows/where/i CVE-2015-100469.8A vulnerability has been found in lolfeedback and classified as critical. Affected by this vulnerability is an unknown functionality. The ma CVE-2015-100479.8A vulnerability was found in KYUUBl school-register. It has been classified as critical. This affects an unknown part of the file src/DBMana CVE-2015-100489.8A vulnerability was found in bmattoso desafio_buzz_woody. It has been rated as critical. This issue affects some unknown processing. The man CVE-2015-100496.1A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some u CVE-2015-10052.1IniNet embeddedWebServer (aka eWebServer) before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent att CVE-2015-100509.8A vulnerability was found in brandonfire miRNA_Database_by_PHP_MySql. It has been declared as critical. This vulnerability affects the funct CVE-2015-100519.8A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displ CVE-2015-100526.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in calesanz gibb-modul-151. This affects the