CVE-2015-10060

CRÍTICO 9.8CVE-2015-10060 · Published 17/01/2023 · updated 17/06/2026

En resumen

CVE-2015-10060 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a mnbikeways database (mnbikeways database project).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.71%, mayor que el 53.7% de las vulnerabilidades.
Solución: actualizar a 2015-06-22 o posterior.

Package	Affected versions	Patched versions
mnbikeways database mnbikeways_database_project	`< 2015-06-22`	`2015-06-22`

Description

A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing of the file Data/views.py. The manipulation of the argument id1/id2 leads to sql injection. The identifier of the patch is 829a027aca7c17f5a7ec1addca8dd5d5542f86ac. It is recommended to apply a patch to fix this issue. The identifier VDB-218417 was assigned to this vulnerability.

References

MNBikeways/database commit 829a027 · Patch
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free