CVE-2015-10097

KRITISCH 9.8CVE-2015-10097 · Published 25/03/2023 · updated 17/06/2026

Kurz gesagt

CVE-2015-10097 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in grinnellplans (grinnellplans).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.61%, höher als bei 49.3% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
grinnellplans grinnellplans	`≤ 3.0`	No fix yet

Description

A vulnerability was found in grinnellplans-php up to 3.0. It has been declared as critical. Affected by this vulnerability is the function interface_disp_page/interface_disp_page of the file read.php. The manipulation leads to sql injection. The attack can be launched remotely. The identifier of the patch is 57e4409e19203a94495140ff1b5a697734d17cfb. It is recommended to apply a patch to fix this issue. The identifier VDB-223801 was assigned to this vulnerability.

References

grinnellplans/grinnellplans-php commit 57e4409 · Patch
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free