CVE-2015-10069 viakondratiuk cash-machine machine.py update_failed_attempts sql injection
CriticalCVSS 9.8
EPSS 0.69%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function is_card_pin_at_session/update_failed_attempts of the file machine.py. The manipulation leads to sql injection. The name of the patch is 62a6e24efdfa195b70d7df140d8287fdc38eb66d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218896.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| viakondratiuk cash-machine | All versions | No fix listed |
| cash-machine project cash-machine | < 2015-03-22 | 2015-03-22 |
References
- vuldb.com permissions-required technical-description third-party-advisory vdb-entry
- vuldb.com permissions-required signature third-party-advisory
- github.com patch third-party-advisory