CVE-2015-10020

CRITIQUE 9.8CVE-2015-10020 · Published 14/01/2023 · updated 17/06/2026

En bref

CVE-2015-10020 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant cis450project (cis450project project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.69%, plus élevée que 52.9% des vulnérabilités.
Correctif : mettre à jour vers 2015-04-29 ou plus récent.

Package	Affected versions	Patched versions
cis450project cis450project_project	`< 2015-04-29`	`2015-04-29`

Description

A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the function addUser of the file HeatMapServer/src/com/datformers/servlet/AddAppUser.java. The manipulation leads to sql injection. The name of the patch is 39b495011437a105c7670e17e071f99195b4922e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218380.

References

ssn2013/cis450Project commit 39b4950 · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free