What’s Vulnerable › Vulnerabilities

CVE-2015-10017: HPI-Information-Systems ProLOD sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-06 · updated 2026-06-17
• Weakness: CWE-89

Description

A vulnerability has been found in HPI-Information-Systems ProLOD and classified as critical. This vulnerability affects unknown code. The manipulation of the argument this leads to sql injection. The name of the patch is 3f710905458d49c77530bd3cbcd8960457566b73. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217552.

Affected products

• HPI-Information-Systems ProLOD: before 7-6-2015 — fixed in 7-6-2015

How to fix

Upgrade to a fixed version: HPI-Information-Systems ProLOD 7-6-2015. Check the vendor advisory for mitigations.

References

• https://github.com/HPI-Information-Systems/ProLOD/commit/3f710905458d49c77530bd3cbcd8960457566b73
• https://vuldb.com/?ctiid.217552
• https://vuldb.com/?id.217552
• https://github.com/HPI-Information-Systems/ProLOD/commit/3f710905458d49c77530bd3cbcd8960457566b73
• https://vuldb.com/?ctiid.217552
• https://vuldb.com/?id.217552

Get alerted when CVE-2015-10017 or the next vulnerability affects your stack