CVE-2014-125050

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-125050
A vulnerability was found in ScottTZhang voter-js and classified as critical. Affected by this issue is some unknown functionality of the file main.js. The manipulation leads to sql injection. The patch is identified as 6317c67a56061aeeaeed3cf9ec665fd9983d8044. It is recommended to apply a patch to fix this issue. VDB-217562 is the identifier assigned to this vulnerability.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 3.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

5.2 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:A/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 5.1 / Impact : 6.4

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://github.com/ScottTZhang/voter-js/commit/6317c67a56061aeeaeed3cf9ec665fd9983d8044 Patch Third Party Advisory
https://github.com/ScottTZhang/voter-js/pull/15 Patch Third Party Advisory
https://vuldb.com/?ctiid.217562 Permissions Required Third Party Advisory
https://vuldb.com/?id.217562 Permissions Required Third Party Advisory
https://github.com/ScottTZhang/voter-js/commit/6317c67a56061aeeaeed3cf9ec665fd9983d8044 Patch Third Party Advisory
https://github.com/ScottTZhang/voter-js/pull/15 Patch Third Party Advisory
https://vuldb.com/?ctiid.217562 Permissions Required Third Party Advisory
https://vuldb.com/?id.217562 Permissions Required Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:voter-js_project:voter-js:*:*:*:*:*:*:*:*
History

21 Nov 2024, 02:03

Type Values Removed Values Added
CVSS v2 : 5.2
v3 : 9.8 		v2 : 5.2
v3 : 5.5
References () https://github.com/ScottTZhang/voter-js/commit/6317c67a56061aeeaeed3cf9ec665fd9983d8044 - Patch, Third Party Advisory () https://github.com/ScottTZhang/voter-js/commit/6317c67a56061aeeaeed3cf9ec665fd9983d8044 - Patch, Third Party Advisory
References () https://github.com/ScottTZhang/voter-js/pull/15 - Patch, Third Party Advisory () https://github.com/ScottTZhang/voter-js/pull/15 - Patch, Third Party Advisory
References () https://vuldb.com/?ctiid.217562 - Permissions Required, Third Party Advisory () https://vuldb.com/?ctiid.217562 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.217562 - Permissions Required, Third Party Advisory () https://vuldb.com/?id.217562 - Permissions Required, Third Party Advisory

29 Feb 2024, 01:14

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad fue encontrada en ScottTZhang voter-js y clasificada como crítica. Una función desconocida del archivo main.js es afectada por este problema. La manipulación conduce a la inyección de SQL. El parche se identifica como 6317c67a56061aeaeed3cf9ec665fd9983d8044. Se recomienda aplicar un parche para solucionar este problema. VDB-217562 es el identificador asignado a esta vulnerabilidad.
Information

Published : 2023-01-06 17:15

Updated : 2024-11-21 02:03

NVD link : CVE-2014-125050

Mitre link : CVE-2014-125050

CVE.ORG link : CVE-2014-125050

JSON object : View

Products Affected

voter-js_project

  • voter-js
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')