CVE-2015-10055

CRITICAL 9.8CVE-2015-10055 · Published 16/01/2023 · updated 17/06/2026

In short

CVE-2015-10055 is a CRITICAL (CVSS 9.8) vulnerability affecting picturethiswebserver (picturethiswebserver project).
Chance of exploitation in the next 30 days (EPSS): 0.72%, higher than 54.1% of all vulnerabilities.
Fix: update to 2015-02-23 or later.

Package	Affected versions	Patched versions
picturethiswebserver picturethiswebserver_project	`< 2015-02-23`	`2015-02-23`

Description

A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes/user.js. The manipulation of the argument username/password leads to sql injection. The patch is named 68b9dc346e88b494df00d88c7d058e96820e1479. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218399.

References

jan-rodriguez/PictureThisWebServer commit 68b9dc3 · Patch
jan-rodriguez/PictureThisWebServer#1 · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free