Skip to content

CVE-2015-10022 IISH nlgis2 custom_import.pl sql injection

CriticalCVSS 9.8 EPSS 0.71%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file scripts/etl/custom_import.pl. The manipulation leads to sql injection. The identifier of the patch is 8bdb6fcf7209584eaf1232437f0f53e735b2b34c. It is recommended to apply a patch to fix this issue. The identifier VDB-217609 was assigned to this vulnerability.

Affected products

ProductAffected versionsFixed in
IISH nlgis2 All versions No fix listed
nlgis2 project nlgis2 < 2015-01-14 2015-01-14

References

  • vuldb.com permissions-required technical-description third-party-advisory vdb-entry
  • vuldb.com permissions-required signature third-party-advisory
  • github.com patch third-party-advisory