CVE-2015-10084

CRITIQUE 9.8CVE-2015-10084 · Published 21/02/2023 · updated 17/06/2026

En bref

CVE-2015-10084 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant klear-library (irontec).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.69%, plus élevée que 53.0% des vulnérabilités.
Correctif : mettre à jour vers 2015-10-15 ou plus récent.

Package	Affected versions	Patched versions
klear-library irontec	`< 2015-10-15`	`2015-10-15`

Description

A vulnerability was found in irontec klear-library chloe and classified as critical. Affected by this issue is the function _prepareWhere of the file Controller/Rest/BaseController.php. The manipulation leads to sql injection. Upgrading to version marla is able to address this issue. The name of the patch is b25262de52fdaffde2a4434fc2a84408b304fbc5. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221504.

References

irontec/klear-library commit b25262d · Patch
irontec/klear-library · Product
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free