PT-2023-10210 · Unknown · Purpleparrots 491-Project

Purpleparrots · Published 2023-01-08 · Updated 2024-05-17 · CVE-2015-10031

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions purpleparrots 491-Project (affected versions not specified)

Description A critical issue was found in the Highscore Handler component of the file update.php, leading to sql injection. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. The manipulation of unknown code in the update.php file leads to this issue.

Recommendations To fix this issue, it is recommended to apply a patch. The name of the patch is a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab. As a temporary workaround, consider restricting access to the update.php file until a patch is applied.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2015-10031

Affected Products

Purpleparrots 491-Project

References · 6

• https://github.com/purpleparrots/491-Project/commit/a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-10031 · Security Note
• https://t.me/cvenotify/41528 · Telegram Post
• https://vuldb.com/?ctiid.217648 · Note
• https://t.me/cvenotify/41533 · Telegram Post
• https://vuldb.com/?id.217648 · Note