CVE-2015-10063

CRITICAL 9.8CVE-2015-10063 · Published 17/01/2023 · updated 17/06/2026

In short

CVE-2015-10063 is a CRITICAL (CVSS 9.8) vulnerability affecting theradsystem (theradsystem project).
Chance of exploitation in the next 30 days (EPSS): 0.88%, higher than 59.2% of all vulnerabilities.
Fix: update to 2015-04-03 or later.

Package	Affected versions	Patched versions
theradsystem theradsystem_project	`< 2015-04-03`	`2015-04-03`

Description

A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect of the file _login.php. The manipulation of the argument user/pass leads to sql injection. The attack may be initiated remotely. The identifier of the patch is bfba26bd34af31648a11af35a0bb66f1948752a6. It is recommended to apply a patch to fix this issue. The identifier VDB-218453 was assigned to this vulnerability.

References

saemorris/TheRadSystem commit bfba26b · Patch
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

More vulnerabilities in theradsystem

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free