PT-2023-10195 · Unknown · Jeff-Kelley Opensim-Utils

Jeff-Kelley

·

CVE-2015-10016

·

Published

2023-01-06

·

Updated

2024-05-17

CVSS v2.0

5.2

Medium

VectorAV:A/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions jeff-kelley opensim-utils (affected versions not specified)
Description A critical issue has been found in jeff-kelley opensim-utils, affecting the DatabaseForRegion function of the file regionscrits.php. The manipulation of the region argument leads to SQL injection.
Recommendations Apply a patch to fix this issue. As a temporary workaround, consider restricting the manipulation of the region argument in the DatabaseForRegion function until a patch is available.

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2015-10016

Affected Products

Jeff-Kelley Opensim-Utils