CVE-2015-10055

CRITICO 9.8CVE-2015-10055 · Published 16/01/2023 · updated 17/06/2026

In breve

CVE-2015-10055 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda picturethiswebserver (picturethiswebserver project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.72%, superiore al 54.1% delle vulnerabilità.
Correzione: aggiornare a 2015-02-23 o successiva.

Package	Affected versions	Patched versions
picturethiswebserver picturethiswebserver_project	`< 2015-02-23`	`2015-02-23`

Description

A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes/user.js. The manipulation of the argument username/password leads to sql injection. The patch is named 68b9dc346e88b494df00d88c7d058e96820e1479. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218399.

References

jan-rodriguez/PictureThisWebServer commit 68b9dc3 · Patch
jan-rodriguez/PictureThisWebServer#1 · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free