PT-2023-10215 · Dronfelipe+1 · Dronfelipe

Dronfelipe + 1 · Published 2023-01-11 · Updated 2024-05-17 · CVE-2015-10036

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions kylebebak dronfelipe (affected versions not specified)

Description A critical issue has been identified, affecting an unknown functionality, which can be manipulated to lead to sql injection.

Recommendations Apply the patch 87405b74fe651892d79d0dff62ed17a7eaef6a60 to fix this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2015-10036

Affected Products

Dronfelipe

References · 5

• https://github.com/kylebebak/dronfelipe/commit/87405b74fe651892d79d0dff62ed17a7eaef6a60 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-10036 · Security Note
• https://vuldb.com/?ctiid.217951 · Note
• https://vuldb.com/?id.217951 · Note
• https://t.me/cvenotify/42315 · Telegram Post