What’s Vulnerable › Vulnerabilities

CVE-2015-10020: ssn2013 cis450Project AddAppUser.java addUser sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-14 · updated 2026-06-17
• Weakness: CWE-89

Description

A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the function addUser of the file HeatMapServer/src/com/datformers/servlet/AddAppUser.java. The manipulation leads to sql injection. The name of the patch is 39b495011437a105c7670e17e071f99195b4922e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218380.

Affected products

• ssn2013 cis450Project: before 2015-04-29 — fixed in 2015-04-29

How to fix

Upgrade to a fixed version: ssn2013 cis450Project 2015-04-29. Check the vendor advisory for mitigations.

References

• https://github.com/ssn2013/cis450Project/commit/39b495011437a105c7670e17e071f99195b4922e
• https://vuldb.com/?ctiid.218380
• https://vuldb.com/?id.218380
• https://github.com/ssn2013/cis450Project/commit/39b495011437a105c7670e17e071f99195b4922e
• https://vuldb.com/?ctiid.218380
• https://vuldb.com/?id.218380

Get alerted when CVE-2015-10020 or the next vulnerability affects your stack