CVE-2015-10084

A vulnerability was found in irontec klear-library chloe and classified as critical. Affected by this issue is the function _prepareWhere of the file Controller/Rest/BaseController.php. The manipulation leads to sql injection. Upgrading to version marla is able to address this issue. The name of the patch is b25262de52fdaffde2a4434fc2a84408b304fbc5. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221504.

• CWE-89

• https://github.com/irontec/klear-library/commit/b25262de52fdaffde2a4434fc2a84408b304fbc5Patch
• https://github.com/irontec/klear-library/tree/marlaProduct
• https://vuldb.com/?ctiid.221504Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.221504Third Party Advisory, VDB Entry
• https://github.com/irontec/klear-library/commit/b25262de52fdaffde2a4434fc2a84408b304fbc5Patch
• https://github.com/irontec/klear-library/tree/marlaProduct
• https://vuldb.com/?ctiid.221504Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.221504Third Party Advisory, VDB Entry

Published

Feb 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-10079A vulnerability was found in juju2143 WalrusIRC 0.0.2. It ha…6.1
• CVE-2015-1008SQL injection vulnerability in Emerson AMS Device Manager be…
• CVE-2015-10080A vulnerability was found in NREL api-umbrella-web 0.7.1. It…6.1
• CVE-2015-10081A vulnerability was found in arnoldle submitByMailPlugin 1.0…8.8
• CVE-2015-10082A vulnerability classified as problematic has been found in …9.8
• CVE-2015-10083A vulnerability has been found in harrystech Dynosaur-Rails …9.8
• CVE-2015-10085A vulnerability was found in GoPistolet. It has been declare…7.5
• CVE-2015-10086A vulnerability, which was classified as critical, was found…9.8
• CVE-2015-10087** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been fou…8.8
• CVE-2015-10088A vulnerability, which was classified as critical, was found…8.1
• CVE-2015-10089A vulnerability classified as problematic has been found in …6.1
• CVE-2015-1009Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch …