Critical severity · published Jan 8, 2023
CVE-2015-10031
A vulnerability classified as critical was found in purpleparrots 491-Project
9.8
CVSS
0.7%
EPSS
No
On KEV
Description
A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.php of the component Highscore Handler. The manipulation leads to sql injection. The name of the patch is a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217648.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
49
491-project · Github
before 2015-03-11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-10031
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-10031
Patch
https://github.com/purpleparrots/491-Project/commit/a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab
Third Party Advisory
https://vuldb.com/?ctiid.217648
Third Party Advisory
https://vuldb.com/?id.217648