Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-10031

A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.php of the component Highscore Handler. The manipulation leads to sql injection. The name of the patch is a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217648.

Published

2023-01-08T17:15:17.763

Last Modified

2024-11-21T02:24:13.000

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

5.1

Impact Score

6.4

Weaknesses

Type: Secondary
CWE-89

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	github	491-project	< 2015-03-11	Yes

References

https://github.com/purpleparrots/491-Project/commit/a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab Patch, Third Party Advisory ([email protected])
https://vuldb.com/?ctiid.217648 Third Party Advisory ([email protected])
https://vuldb.com/?id.217648 Third Party Advisory ([email protected])
https://github.com/purpleparrots/491-Project/commit/a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.217648 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.217648 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)