CVE-2015-10044: gophergala sqldump sql injection

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-15 · updated 2026-06-17
Weakness: CWE-89

Description

A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 76db54e9073b5248b8863e71a63d66a32d567d21. It is recommended to apply a patch to fix this issue. VDB-218350 is the identifier assigned to this vulnerability.

Affected products

gophergala sqldump: before 2015-01-24 — fixed in 2015-01-24

How to fix

Upgrade to a fixed version: gophergala sqldump 2015-01-24. Check the vendor advisory for mitigations.

References

https://github.com/gophergala/sqldump/commit/76db54e9073b5248b8863e71a63d66a32d567d21
https://vuldb.com/?ctiid.218350
https://vuldb.com/?id.218350
https://github.com/gophergala/sqldump/commit/76db54e9073b5248b8863e71a63d66a32d567d21
https://vuldb.com/?ctiid.218350
https://vuldb.com/?id.218350

Get alerted when CVE-2015-10044 or the next vulnerability affects your stack