CVE-2015-10049

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is e39645fd714adb7e549908780235911ae282b21b. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218372.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jan 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-10052.1IniNet embeddedWebServer (aka eWebServer) before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent att CVE-2015-100509.8A vulnerability was found in brandonfire miRNA_Database_by_PHP_MySql. It has been declared as critical. This vulnerability affects the funct CVE-2015-100519.8A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displ CVE-2015-100526.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in calesanz gibb-modul-151. This affects the CVE-2015-100539.8A vulnerability classified as critical has been found in prodigasistemas curupira up to 0.1.3. Affected is an unknown function of the file a CVE-2015-100549.8A vulnerability, which was classified as critical, was found in githuis P2Manage. This affects the function Execute of the file PTwoManage/D CVE-2015-100559.8A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes CVE-2015-100569.8A vulnerability was found in 2071174A vinylmap. It has been classified as critical. Affected is the function contact of the file recordstore CVE-2015-100579.8A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unkno CVE-2015-100586.1A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file ind CVE-2015-100596.1A vulnerability has been found in s134328 Webapplication-Veganguide and classified as problematic. This vulnerability affects unknown code o CVE-2015-10069.8A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Ba