CVE-2014-125044

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in soshtolsus wing-tight. This affects an unknown part of the file index.php. The manipulation of the argument p leads to file inclusion. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. The patch is named 567bc33e6ed82b0d0179c9add707ac2b257aeaf2. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217515.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-73 CWE-610

Affected software

No affected versions have been published.

Timeline

Published: Jan 5, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-1250459.8A vulnerability has been found in meol1 and classified as critical. Affected by this vulnerability is the function GetAnimal of the file opd CVE-2014-1250469.8A vulnerability, which was classified as critical, was found in Seiji42 cub-scout-tracker. This affects an unknown part of the file database CVE-2014-1250479.8A vulnerability classified as critical has been found in tbezman school-store. This affects an unknown part. The manipulation leads to sql i CVE-2014-1250485.4A vulnerability, which was classified as critical, has been found in kassi xingwall. This issue affects some unknown processing of the file CVE-2014-1250499.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in typcn Blogile. Affected is the function getN CVE-2014-1250509.8A vulnerability was found in ScottTZhang voter-js and classified as critical. Affected by this issue is some unknown functionality of the fi CVE-2014-1250519.8A vulnerability was found in himiklab yii2-jqgrid-widget up to 1.0.7. It has been declared as critical. This vulnerability affects the funct CVE-2014-1250529.8A vulnerability was found in JervenBolleman sparql-identifiers and classified as critical. This issue affects some unknown processing of the CVE-2014-1250539.8A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the CVE-2014-1250544.3A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote Han CVE-2014-1250555.3A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the fi CVE-2014-1250565.3A vulnerability was found in Pylons horus and classified as problematic. Affected by this issue is some unknown functionality of the file ho