CVE-2015-10042

CVE-2015-10042 is a critical SQL injection vulnerability found in the registerUser function of the site/procedures.php file within Dovgalyuk AIBattle. This flaw allows an attacker to manipulate the postLogin argument, leading to unauthorized database access. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability compromise. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability. It is important to note that this vulnerability affects an unsupported product.