CVE-2015-10044

MEDIUM

sqldump < 2015-01-24 - SQL Injection

Title source: llm
STIX 2.1

Description

A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 76db54e9073b5248b8863e71a63d66a32d567d21. It is recommended to apply a patch to fix this issue. VDB-218350 is the identifier assigned to this vulnerability.

References (3)

Core 3
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.218350
Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.218350

Scores

CVSS v3 5.5
EPSS 0.0064
EPSS Percentile 47.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-89
Status published
Products (1)
sqldump_project/sqldump < 2015-01-24
Published Jan 15, 2023
Tracked Since Feb 18, 2026