What’s Vulnerable › Vulnerabilities

CVE-2015-10070: copperwall Twiddit index.php sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-19 · updated 2026-06-17
• Weakness: CWE-89

Description

A vulnerability was found in copperwall Twiddit. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation leads to sql injection. The identifier of the patch is 2203d4ce9810bdaccece5c48ff4888658a01acfc. It is recommended to apply a patch to fix this issue. The identifier VDB-218897 was assigned to this vulnerability.

Affected products

• copperwall Twiddit: before 2015-03-18 — fixed in 2015-03-18

How to fix

Upgrade to a fixed version: copperwall Twiddit 2015-03-18. Check the vendor advisory for mitigations.

References

• https://github.com/copperwall/twiddit/commit/2203d4ce9810bdaccece5c48ff4888658a01acfc
• https://vuldb.com/?ctiid.218897
• https://vuldb.com/?id.218897
• https://github.com/copperwall/twiddit/commit/2203d4ce9810bdaccece5c48ff4888658a01acfc
• https://vuldb.com/?ctiid.218897
• https://vuldb.com/?id.218897

Get alerted when CVE-2015-10070 or the next vulnerability affects your stack