CVE-2014-125038

CVSS V2 None CVSS V3 None

Description

A vulnerability has been found in IS_Projecto2 and classified as critical. This vulnerability affects unknown code of the file Cnn-EJB/ejbModule/ejbs/NewsBean.java. The manipulation of the argument date leads to sql injection. The name of the patch is aa128b2c9c9fdcbbf5ecd82c1e92103573017fe0. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217192.

Overview

CVE ID
CVE-2014-125038

Assigner
cna@vuldb.com

Vulnerability Status
Analyzed

Published Version
2023-01-02T18:15:18

Last Modified Date
2023-01-09T19:00:10

Weakness Enumerations

CWE	URL
CWE-89	http://cwe.mitre.org/data/definitions/89.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:is_projecto2_project:is_projecto2::::::::	1	OR		2014-11-12

References

Reference URL	Reference Tags
https://github.com/rfsimoes/IS_Projecto2/commit/aa128b2c9c9fdcbbf5ecd82c1e92103573017fe0
https://vuldb.com/?ctiid.217192
https://vuldb.com/?id.217192

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2014-125038
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-125038

History

Created	Old Value	New Value	Data Type	Notes
2023-01-02 18:16:38				Added to TrackCVE
2023-01-02 18:16:38			Weakness Enumeration	new
2023-01-03 14:13:35		2023-01-03T13:26:34	CVE Modified Date	updated
2023-01-03 14:13:35	Received	Awaiting Analysis	Vulnerability Status	updated
2023-01-03 14:13:38			CVSS V3 information	new
2023-01-03 14:13:38			CVSS V2 information	new
2023-01-06 16:20:21	Awaiting Analysis	Undergoing Analysis	Vulnerability Status	updated
2023-01-06 16:20:24			CVSS V3 information	new
2023-01-06 16:20:24			CVSS V2 information	new
2023-01-09 19:18:11		2023-01-09T19:00:10	CVE Modified Date	updated
2023-01-09 19:18:11	Undergoing Analysis	Analyzed	Vulnerability Status	updated
2023-01-09 19:18:14			CPE Information	updated
2023-01-09 19:18:14			CVSS V3 information	new
2023-01-09 19:18:14			CVSS V2 information	new