CVE-2015-10070
Last modified
CVE-2015-10070 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability was found in copperwall Twiddit. It has been rated as critical. EPSS estimates a 0.73% chance of exploitation in the next 30 days.
Description
A vulnerability was found in copperwall Twiddit. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation leads to sql injection. The identifier of the patch is 2203d4ce9810bdaccece5c48ff4888658a01acfc. It is recommended to apply a patch to fix this issue. The identifier VDB-218897 was assigned to this vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Twiddit Project | Twiddit | < 2015-03-18 |
References
- https://github.com/copperwall/twiddit/commit/2203d4ce9810bdaccece5c48ff4888658a01acfcPatch, Third Party Advisory
- https://vuldb.com/?ctiid.218897Permissions Required, Third Party Advisory
- https://vuldb.com/?id.218897Permissions Required, Third Party Advisory
- https://github.com/copperwall/twiddit/commit/2203d4ce9810bdaccece5c48ff4888658a01acfcPatch, Third Party Advisory
- https://vuldb.com/?ctiid.218897Permissions Required, Third Party Advisory
- https://vuldb.com/?id.218897Permissions Required, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-10070?
How severe is CVE-2015-10070?
How do I fix CVE-2015-10070?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-10065A vulnerability classified as critical was found in AenBleid…9.8
- CVE-2015-10066A vulnerability was found in tynx wuersch and classified as …9.8
- CVE-2015-10067A vulnerability was found in oznetmaster SSharpSmartThreadPo…8.1
- CVE-2015-10068A vulnerability classified as critical was found in danynab …9.8
- CVE-2015-10069A vulnerability was found in viakondratiuk cash-machine. It …9.8
- CVE-2015-1007A specially crafted configuration file could be used to caus…
- CVE-2015-10071A vulnerability was found in gitter-badger ezpublish-modern-…7.5
- CVE-2015-10072A vulnerability classified as problematic was found in NREL …6.1
- CVE-2015-10073A vulnerability, which was classified as problematic, was fo…9.6
- CVE-2015-10074A vulnerability was found in OpenSeaMap online_chart 1.2. It…6.1
- CVE-2015-10075A vulnerability was found in Custom-Content-Width 1.0. It ha…6.1
- CVE-2015-10076A vulnerability was found in dimtion Shaarlier up to 1.2.2. …9.8
Are you affected by CVE-2015-10070?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
