CVE-2015-10051

Medium

Description

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function display_all_replies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as 26439bc4c63632d63ba89ebc0f149b25a9010361. It is recommended to apply a patch to fix this issue. VDB-218378 is the identifier assigned to this vulnerability.

SeverityMedium

CVSS5.5

Exploit probability—

ProductDiscussion-board

PublishedJan 15, 2023

First seenJan 15, 2023

Weakness typeCWE-89SQL injection

How to fix

Update

discussion-board_project discussion-board2015-06-19 or later

Patches

github.com/bony2023/Discussion-Board/commit/26439bc4c63632d63ba89ebc0f149b25a9010361

Affected products

Product	Affected versions	Fixed in
discussion-board_project discussion-board	v < 2015-06-19	2015-06-19

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.