CVE-2015-10057

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 0.2 is able to address this issue. The identifier of the patch is 07ba8273a9311d1383f3686ac7cb32f20770ab1e. It is recommended to upgrade the affected component. The identifier VDB-218401 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jan 16, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100586.1A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file ind CVE-2015-100596.1A vulnerability has been found in s134328 Webapplication-Veganguide and classified as problematic. This vulnerability affects unknown code o CVE-2015-10069.8A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Ba CVE-2015-100609.8A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing of the file Data/vie CVE-2015-100619.8A vulnerability was found in evandro-machado Trabalho-Web2. It has been classified as critical. This affects an unknown part of the file src CVE-2015-100629.8A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the c CVE-2015-100639.8A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect of the file _login.CVE-2015-100649.8A vulnerability was found in VictorFerraresi pokemon-database-php. It has been declared as critical. Affected by this vulnerability is an un CVE-2015-100659.8A vulnerability classified as critical was found in AenBleidd FiND. This vulnerability affects the function init_result of the file validato CVE-2015-100669.8A vulnerability was found in tynx wuersch and classified as critical. Affected by this issue is the function packValue/getByCustomQuery of t CVE-2015-100678.1A vulnerability was found in oznetmaster SSharpSmartThreadPool. It has been classified as problematic. This affects an unknown part of the f CVE-2015-100689.8A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/b