CVE-2015-10053

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in prodigasistemas curupira up to 0.1.3. Affected is an unknown function of the file app/controllers/curupira/passwords_controller.rb. The manipulation leads to sql injection. Upgrading to version 0.1.4 is able to address this issue. The patch is identified as 93a9a77896bb66c949acb8e64bceafc74bc8c271. It is recommended to upgrade the affected component. VDB-218394 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jan 16, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100549.8A vulnerability, which was classified as critical, was found in githuis P2Manage. This affects the function Execute of the file PTwoManage/D CVE-2015-100559.8A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes CVE-2015-100569.8A vulnerability was found in 2071174A vinylmap. It has been classified as critical. Affected is the function contact of the file recordstore CVE-2015-100579.8A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unkno CVE-2015-100586.1A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file ind CVE-2015-100596.1A vulnerability has been found in s134328 Webapplication-Veganguide and classified as problematic. This vulnerability affects unknown code o CVE-2015-10069.8A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Ba CVE-2015-100609.8A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing of the file Data/vie CVE-2015-100619.8A vulnerability was found in evandro-machado Trabalho-Web2. It has been classified as critical. This affects an unknown part of the file src CVE-2015-100629.8A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the c CVE-2015-100639.8A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect of the file _login.CVE-2015-100649.8A vulnerability was found in VictorFerraresi pokemon-database-php. It has been declared as critical. Affected by this vulnerability is an un