A vulnerability, which was classified as critical, was found in OpenCycleCompass server-php. Affected is an unknown function of the file api1/login.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is fa0d9bcf81c711a88172ad0d37a842f029ac3782. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-221808.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: VulDB
Published: 2023-02-28T00:00:04.985Z
Updated: 2024-08-06T08:58:26.108Z
Reserved: 2023-02-26T15:53:40.066Z
Link: CVE-2015-10086
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-02-28T00:15:09.840
Modified: 2024-11-21T02:24:20.780
Link: CVE-2015-10086
Redhat
No data.