CVE-2014-5114

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-5114
WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the (1) js or (2) cat parameter.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://packetstormsecurity.com/files/127431/WeBid-1.1.1-Cross-Site-Scripting-LDAP-Injection.html Exploit
http://www.securityfocus.com/bid/68519 Exploit
http://packetstormsecurity.com/files/127431/WeBid-1.1.1-Cross-Site-Scripting-LDAP-Injection.html Exploit
http://www.securityfocus.com/bid/68519 Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:webidsupport:webid:1.1.1:*:*:*:*:*:*:*
History

21 Nov 2024, 02:11

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/127431/WeBid-1.1.1-Cross-Site-Scripting-LDAP-Injection.html - Exploit () http://packetstormsecurity.com/files/127431/WeBid-1.1.1-Cross-Site-Scripting-LDAP-Injection.html - Exploit
References () http://www.securityfocus.com/bid/68519 - Exploit () http://www.securityfocus.com/bid/68519 - Exploit
Information

Published : 2014-07-29 14:55

Updated : 2024-11-21 02:11

NVD link : CVE-2014-5114

Mitre link : CVE-2014-5114

CVE.ORG link : CVE-2014-5114

JSON object : View

Products Affected

webidsupport

  • webid
CWE
NVD-CWE-Other