CVE-2015-10042 - Dovgalyuk AIBattle procedures.php registerUser sql injection

Back Back to CVE browser

CRITICAL

Dovgalyuk AIBattle procedures.php registerUser sql injection

Published Jan 13, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.66%

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is 448e9880aac18ae7832f8d065e03e46ce0f1d3e3. It is recommended to apply a patch to fix this issue. The identifier VDB-218305 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor Dovgalyuk Product AIBattle Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dovgalyuk

AIBattle

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://github.com/Dovgalyuk/AIBattle-disabled-/commit/448e9880aac18ae7832f8d065e03e46ce0f1d3e3
patchThird Party Advisory
https://vuldb.com/?ctiid.218305
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.218305
vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory

Link	Providers	Tags
https://github.com/Dovgalyuk/AIBattle-disabled-/commit/448e9880aac18ae7832f8d065e03e46ce0f1d3e3		patchThird Party Advisory
https://vuldb.com/?ctiid.218305		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.218305		vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory