PT-2023-10243 · Victorferraresi · Pokemon-Database-Php

Victor Ferraresi · Publicado 2023-01-17 · Atualizado 2024-05-17 · CVE-2015-10064

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions VictorFerraresi pokemon-database-php (affected versions not specified)

Description A critical issue was found in the software, affecting an unknown functionality, which leads to sql injection. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations Apply a patch to fix this issue. The patch is named dd0e1e6cdf648d6a3deff441f515bcb1d7573d68.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2015-10064

Produtos afetados

Pokemon-Database-Php

Referências · 7

• https://github.com/VictorFerraresi/pokemon-database-php/commit/dd0e1e6cdf648d6a3deff441f515bcb1d7573d68 · Correção
• https://t.me/cvenotify/42177 · Publicação no Telegram
• https://t.me/cvenotify/59784 · Publicação no Telegram
• https://t.me/cibsecurity/56605 · Publicação no Telegram
• https://vuldb.com/?ctiid.218455 · Nota
• https://vuldb.com/?id.218455 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-10064 · Nota de Segurança