CVE-2016-15029

A vulnerability has been found in Ydalb mapicoin up to 1.9.0 and classified as problematic. This vulnerability affects unknown code of the file webroot/stats.php. The manipulation of the argument link/search leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.10.0 is able to address this issue. The patch is identified as 67e87f0f0c1ac238fcd050f4c3db298229bc9679. It is recommended to upgrade the affected component. VDB-223402 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/Ydalb/mapicoin/commit/67e87f0f0c1ac238fcd050f4c3db298229bc9679Patch
• https://vuldb.com/?ctiid.223402Permissions Required, Third Party Advisory
• https://vuldb.com/?id.223402Third Party Advisory
• https://github.com/Ydalb/mapicoin/commit/67e87f0f0c1ac238fcd050f4c3db298229bc9679Patch
• https://vuldb.com/?ctiid.223402Permissions Required, Third Party Advisory
• https://vuldb.com/?id.223402Third Party Advisory

Published

Mar 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-15023A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2016-15024A vulnerability was found in doomsider shadow. It has been c…5.5
• CVE-2016-15025A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2016-15026A vulnerability was found in 3breadt dd-plist 1.17 and class…7.8
• CVE-2016-15027A vulnerability was found in meta4creations Post Duplicator …6.1
• CVE-2016-15028A vulnerability was found in ICEPAY REST-API-NET 0.9. It has…5.9
• CVE-2016-1503dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5…
• CVE-2016-15030A vulnerability classified as problematic has been found in …6.1
• CVE-2016-15031A vulnerability was found in PHP-Login 1.0. It has been decl…9.8
• CVE-2016-15032** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…6.1
• CVE-2016-15033The Delete All Comments plugin for WordPress is vulnerable t…9.8
• CVE-2016-15034A vulnerability was found in Dynacase Webdesk and classified…9.8