CVE-2015-10045

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in tutrantta project_todolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218352.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
tutrantta	project_todolist	n/a

References

https://github.com/tutrantta/project_todolist/commit/194a0411bbe11aa4813f13c66b9e8ea403539141Patch, Third Party Advisory
https://vuldb.com/?ctiid.218352Permissions Required, Third Party Advisory
https://vuldb.com/?id.218352Permissions Required, Third Party Advisory
https://github.com/tutrantta/project_todolist/commit/194a0411bbe11aa4813f13c66b9e8ea403539141Patch, Third Party Advisory
https://vuldb.com/?ctiid.218352Permissions Required, Third Party Advisory
https://vuldb.com/?id.218352Permissions Required, Third Party Advisory

Timeline

Published: Jan 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100469.8A vulnerability has been found in lolfeedback and classified as critical. Affected by this vulnerability is an unknown functionality. The ma CVE-2015-100479.8A vulnerability was found in KYUUBl school-register. It has been classified as critical. This affects an unknown part of the file src/DBMana CVE-2015-100489.8A vulnerability was found in bmattoso desafio_buzz_woody. It has been rated as critical. This issue affects some unknown processing. The man CVE-2015-100496.1A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some u CVE-2015-10052.1IniNet embeddedWebServer (aka eWebServer) before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent att CVE-2015-100509.8A vulnerability was found in brandonfire miRNA_Database_by_PHP_MySql. It has been declared as critical. This vulnerability affects the funct CVE-2015-100519.8A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displ CVE-2015-100526.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in calesanz gibb-modul-151. This affects the CVE-2015-100539.8A vulnerability classified as critical has been found in prodigasistemas curupira up to 0.1.3. Affected is an unknown function of the file a CVE-2015-100549.8A vulnerability, which was classified as critical, was found in githuis P2Manage. This affects the function Execute of the file PTwoManage/D CVE-2015-100559.8A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes CVE-2015-100569.8A vulnerability was found in 2071174A vinylmap. It has been classified as critical. Affected is the function contact of the file recordstore