medium5.5
CVE-2015-10022
A vulnerability was found in IISH nlgis2.
Impact
A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file scripts/etl/custom_import.pl. The manipulation leads to sql injection. The identifier of the patch is 8bdb6fcf7209584eaf1232437f0f53e735b2b34c. It is recommended to apply a patch to fix this issue. The identifier VDB-217609 was assigned to this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nlgis2 Project | Nlgis2 | before 2015-01-14 |