CVE-2015-10042

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is 448e9880aac18ae7832f8d065e03e46ce0f1d3e3. It is recommended to apply a patch to fix this issue. The identifier VDB-218305 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Dovgalyuk	AIBattle	n/a

References

https://github.com/Dovgalyuk/AIBattle-disabled-/commit/448e9880aac18ae7832f8d065e03e46ce0f1d3e3Patch, Third Party Advisory
https://vuldb.com/?ctiid.218305Permissions Required, Third Party Advisory
https://vuldb.com/?id.218305Permissions Required, Third Party Advisory
https://github.com/Dovgalyuk/AIBattle-disabled-/commit/448e9880aac18ae7832f8d065e03e46ce0f1d3e3Patch, Third Party Advisory
https://vuldb.com/?ctiid.218305Permissions Required, Third Party Advisory
https://vuldb.com/?id.218305Permissions Required, Third Party Advisory

Timeline

Published: Jan 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100438.8A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argumen CVE-2015-100449.8A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The manipulation leads to s CVE-2015-100459.8A vulnerability, which was classified as critical, was found in tutrantta project_todolist. Affected is the function getAffectedRows/where/i CVE-2015-100469.8A vulnerability has been found in lolfeedback and classified as critical. Affected by this vulnerability is an unknown functionality. The ma CVE-2015-100479.8A vulnerability was found in KYUUBl school-register. It has been classified as critical. This affects an unknown part of the file src/DBMana CVE-2015-100489.8A vulnerability was found in bmattoso desafio_buzz_woody. It has been rated as critical. This issue affects some unknown processing. The man CVE-2015-100496.1A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some u CVE-2015-10052.1IniNet embeddedWebServer (aka eWebServer) before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent att CVE-2015-100509.8A vulnerability was found in brandonfire miRNA_Database_by_PHP_MySql. It has been declared as critical. This vulnerability affects the funct CVE-2015-100519.8A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displ CVE-2015-100526.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in calesanz gibb-modul-151. This affects the CVE-2015-100539.8A vulnerability classified as critical has been found in prodigasistemas curupira up to 0.1.3. Affected is an unknown function of the file a