CVE-2015-10066

CVE-2015-10066 is a critical SQL injection vulnerability affecting the packValue/getByCustomQuery function within the backend/base/Store.class.php file of tynx wuersch and wuersch_project. This flaw allows an unauthenticated attacker to execute arbitrary SQL commands due to improper input sanitization. With a CVSS score of 9.8 (CRITICAL), successful exploitation can lead to complete compromise of confidentiality, integrity, and availability of the affected system. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating awareness.