CVE-2015-10074

MITTEL 6.1CVE-2015-10074 · Published 07/02/2023 · updated 17/06/2026

Kurz gesagt

CVE-2015-10074 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in online chart (openseamap).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.51%, höher als bei 43.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
online chart openseamap	`= 1.2`	No fix yet

Description

A vulnerability was found in OpenSeaMap online_chart 1.2. It has been classified as problematic. Affected is the function init of the file index.php. The manipulation of the argument mtext leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version staging is able to address this issue. The patch is identified as 8649157158f921590d650e2d2f4bdf0df1017e9d. It is recommended to upgrade the affected component. VDB-220218 is the identifier assigned to this vulnerability.

References

OpenSeaMap/online_chart commit 8649157 · Patch
OpenSeaMap/online_chart#70 · Patch
OpenSeaMap/online_chart release staging · Patch
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free