CVE-2015-10054 githuis P2Manage Database.cs Execute sql injection
CriticalCVSS 9.8
EPSS 0.70%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability, which was classified as critical, was found in githuis P2Manage. This affects the function Execute of the file PTwoManage/Database.cs. The manipulation of the argument sql leads to sql injection. The identifier of the patch is 717380aba80002414f82d93c770035198b7858cc. It is recommended to apply a patch to fix this issue. The identifier VDB-218397 was assigned to this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| githuis P2Manage | All versions | No fix listed |
| p2manage project p2manage | < 2015-05-15 | 2015-05-15 |
References
- vuldb.com permissions-required technical-description third-party-advisory vdb-entry
- vuldb.com permissions-required signature third-party-advisory
- github.com patch third-party-advisory