PT-2023-10243 · Victorferraresi · Pokemon-Database-Php

Victor Ferraresi · Published 2023-01-17 · Updated 2024-05-17 · CVE-2015-10064

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions VictorFerraresi pokemon-database-php (affected versions not specified)

Description A critical issue was found in the software, affecting an unknown functionality, which leads to sql injection. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations Apply a patch to fix this issue. The patch is named dd0e1e6cdf648d6a3deff441f515bcb1d7573d68.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2015-10064

Affected Products

Pokemon-Database-Php

References · 7

• https://github.com/VictorFerraresi/pokemon-database-php/commit/dd0e1e6cdf648d6a3deff441f515bcb1d7573d68 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-10064 · Security Note
• https://t.me/cvenotify/42177 · Telegram Post
• https://t.me/cvenotify/59784 · Telegram Post
• https://t.me/cibsecurity/56605 · Telegram Post
• https://vuldb.com/?ctiid.218455 · Note
• https://vuldb.com/?id.218455 · Note