Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Dovgalyuk Ai

#22126de 53,635
10.4CVSS total
Vulnerabilidades · 2
Média
2
PT-2023-10220
5.2
2023-01-13
Unknown · Dovgalyuk Aibattle · CVE-2015-10041
**Name of the Vulnerable Software and Affected Versions** Dovgalyuk AIBattle (affected versions not specified) **Description** A critical vulnerability has been found in Dovgalyuk AIBattle. The issue affects the `sendComments` function of the file `site/procedures.php`. The manipulation of the `text` argument leads to SQL injection. **Recommendations** Apply a patch to fix this issue. The patch is identified by the name e3aa4d0900167641d41cbccf53909229f00381c9. As a temporary workaround, consider disabling the `sendComments` function until a patch is available. Restrict access to the `site/procedures.php` file to minimize the risk of exploitation. Avoid using the `text` argument in the affected function until the issue is resolved.
PT-2023-10221
5.2
2023-01-13
Unknown · Dovgalyuk Aibattle · CVE-2015-10042
**Name of the Vulnerable Software and Affected Versions** Dovgalyuk AIBattle (affected versions not specified) **Description** A critical vulnerability was found in Dovgalyuk AIBattle. The issue affects the `registerUser` function in the file site/procedures.php. The manipulation of the `postLogin` argument leads to SQL injection. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.