CVE-2014-125050

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-125050
A vulnerability was found in ScottTZhang voter-js and classified as critical. Affected by this issue is some unknown functionality of the file main.js. The manipulation leads to sql injection. The patch is identified as 6317c67a56061aeeaeed3cf9ec665fd9983d8044. It is recommended to apply a patch to fix this issue. VDB-217562 is the identifier assigned to this vulnerability.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 3.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

5.2 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:A/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 5.1 / Impact : 6.4

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://github.com/ScottTZhang/voter-js/commit/6317c67a56061aeeaeed3cf9ec665fd9983d8044 Patch Third Party Advisory
https://github.com/ScottTZhang/voter-js/pull/15 Patch Third Party Advisory
https://vuldb.com/?ctiid.217562 Permissions Required Third Party Advisory
https://vuldb.com/?id.217562 Permissions Required Third Party Advisory
https://github.com/ScottTZhang/voter-js/commit/6317c67a56061aeeaeed3cf9ec665fd9983d8044 Patch Third Party Advisory
https://github.com/ScottTZhang/voter-js/pull/15 Patch Third Party Advisory
https://vuldb.com/?ctiid.217562 Permissions Required Third Party Advisory
https://vuldb.com/?id.217562 Permissions Required Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:voter-js_project:voter-js:*:*:*:*:*:*:*:*
History

21 Nov 2024, 02:03

Type Values Removed Values Added
References () https://github.com/ScottTZhang/voter-js/commit/6317c67a56061aeeaeed3cf9ec665fd9983d8044 - Patch, Third Party Advisory () https://github.com/ScottTZhang/voter-js/commit/6317c67a56061aeeaeed3cf9ec665fd9983d8044 - Patch, Third Party Advisory
References () https://github.com/ScottTZhang/voter-js/pull/15 - Patch, Third Party Advisory () https://github.com/ScottTZhang/voter-js/pull/15 - Patch, Third Party Advisory
References () https://vuldb.com/?ctiid.217562 - Permissions Required, Third Party Advisory () https://vuldb.com/?ctiid.217562 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.217562 - Permissions Required, Third Party Advisory () https://vuldb.com/?id.217562 - Permissions Required, Third Party Advisory
CVSS v2 : 5.2
v3 : 9.8 		v2 : 5.2
v3 : 5.5

29 Feb 2024, 01:14

Type Values Removed Values Added
New CVE
Information

Published : 2023-01-06 17:15

Updated : 2024-11-21 02:03

NVD link : CVE-2014-125050

Mitre link : CVE-2014-125050

CVE.ORG link : CVE-2014-125050

JSON object : View

Products Affected

voter-js_project

  • voter-js
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')