CVE-2010-10007

CRITICAL 9.8CVE-2010-10007 · Published 18/01/2023 · updated 16/06/2026

In short

CVE-2010-10007 is a CRITICAL (CVSS 9.8) vulnerability affecting click-reminder (click-reminder project).
Chance of exploitation in the next 30 days (EPSS): 0.69%, higher than 53.0% of all vulnerabilities.
Fix: update to 2010-09-17 or later.

Package	Affected versions	Patched versions
click-reminder click-reminder_project	`< 2010-09-17`	`2010-09-17`

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in lierdakil click-reminder. It has been rated as critical. This issue affects the function db_query of the file src/backend/include/BaseAction.php. The manipulation leads to sql injection. The identifier of the patch is 41213b660e8eb01b22c8074f06208f59a73ca8dc. It is recommended to apply a patch to fix this issue. The identifier VDB-218465 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

References

lierdakil/click-reminder commit 41213b6 · Patch
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free