CVE-2015-10008

MEDIUM

weipdcrm < 2015-04-01 - SQL Injection

Title source: llm
STIX 2.1

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The identifier of the patch is 43bad79392332fa39e31b95268e76fbda9fec3a4. It is recommended to apply a patch to fix this issue. The identifier VDB-217185 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

References (3)

Core 3
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.217185
Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.217185

Scores

CVSS v3 6.3
EPSS 0.0066
EPSS Percentile 47.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-89
Status published
Products (1)
weipdcrm_project/weipdcrm < 2015-04-01
Published Jan 02, 2023
Tracked Since Feb 18, 2026