QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2015-10044

Back to search

CVE-2015-10044

Published: Jan 15, 2023

Modified: Aug 6, 2024

PUBLISHED

CVSS v3.1

5.5

MEDIUM

Description

A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 76db54e9073b5248b8863e71a63d66a32d567d21. It is recommended to apply a patch to fix this issue. VDB-218350 is the identifier assigned to this vulnerability.

VendorProductVersions

gophergala

sqldump

affected
n/a

Weaknesses (CWE)

CWE-89

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

References

https://vuldb.com/?id.218350
vdb-entry
technical-description
https://vuldb.com/?ctiid.218350
signature
permissions-required

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now