CVE-2015-10018

A vulnerability has been found in DBRisinajumi d2files and classified as critical. Affected by this vulnerability is the function actionUpload/actionDownloadFile of the file controllers/D2filesController.php. The manipulation leads to sql injection. Upgrading to version 1.0.0 is able to address this issue. The identifier of the patch is b5767f2ec9d0f3cbfda7f13c84740e2179c90574. It is recommended to upgrade the affected component. The identifier VDB-217561 was assigned to this vulnerability.

• CWE-89

• https://github.com/DBRisinajumi/d2files/commit/b5767f2ec9d0f3cbfda7f13c84740e2179c90574Patch, Third Party Advisory
• https://github.com/DBRisinajumi/d2files/releases/tag/1.0.0Third Party Advisory
• https://vuldb.com/?ctiid.217561Permissions Required, Third Party Advisory
• https://vuldb.com/?id.217561Permissions Required, Third Party Advisory
• https://github.com/DBRisinajumi/d2files/commit/b5767f2ec9d0f3cbfda7f13c84740e2179c90574Patch, Third Party Advisory
• https://github.com/DBRisinajumi/d2files/releases/tag/1.0.0Third Party Advisory
• https://vuldb.com/?ctiid.217561Permissions Required, Third Party Advisory
• https://vuldb.com/?id.217561Permissions Required, Third Party Advisory

Published

Jan 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-10012** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…7.5
• CVE-2015-10013A vulnerability was found in WebDevStudios taxonomy-switcher…6.1
• CVE-2015-10014A vulnerability classified as critical has been found in are…9.8
• CVE-2015-10015A vulnerability, which was classified as critical, has been …9.8
• CVE-2015-10016A vulnerability, which was classified as critical, has been …9.8
• CVE-2015-10017A vulnerability has been found in HPI-Information-Systems Pr…9.8
• CVE-2015-10019A vulnerability, which was classified as problematic, has be…6.1
• CVE-2015-1002IniNet embeddedWebServer (aka eWebServer) before 2.02 mishan…
• CVE-2015-10020A vulnerability has been found in ssn2013 cis450Project and …9.8
• CVE-2015-10021A vulnerability was found in ritterim definely. It has been …6.1
• CVE-2015-10022A vulnerability was found in IISH nlgis2. It has been declar…9.8
• CVE-2015-10023A vulnerability classified as critical has been found in Fum…9.8