CVE-2015-10044
gophergala sqldump sql injection
- State
- Published
- Severity
- 5.5 Medium
- Published
- Jan 15, 2023
- Updated
- Aug 6, 2024
- Reserved
- Jan 14, 2023
Description
A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 76db54e9073b5248b8863e71a63d66a32d567d21. It is recommended to apply a patch to fix this issue. VDB-218350 is the identifier assigned to this vulnerability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 3.0 | 5.5 Medium | CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 2.0 | 5.2 Medium | AV:A/AC:L/Au:S/C:P/I:P/A:P | VulDB |
Weaknesses
- CWE-89 SQL Injection
Affected Products
| Product | Versions |
|---|---|
sqldumpgophergala |
|
References
- https://vuldb.com/?id.218350vdb-entrytechnical-description
- https://vuldb.com/?ctiid.218350signaturepermissions-required
- https://github.com/gophergala/sqldump/commit/76db54e9073b5248b8863e71a63d66a32d567d21patch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.