CVE-2014-125049

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in typcn Blogile. Affected is the function getNav of the file server.js. The manipulation of the argument query leads to sql injection. The name of the patch is cfec31043b562ffefe29fe01af6d3c5ed1bf8f7d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217560. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jan 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-1250509.8A vulnerability was found in ScottTZhang voter-js and classified as critical. Affected by this issue is some unknown functionality of the fiCVE-2014-1250519.8A vulnerability was found in himiklab yii2-jqgrid-widget up to 1.0.7. It has been declared as critical. This vulnerability affects the functCVE-2014-1250529.8A vulnerability was found in JervenBolleman sparql-identifiers and classified as critical. This issue affects some unknown processing of theCVE-2014-1250539.8A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of theCVE-2014-1250544.3A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote HanCVE-2014-1250555.3A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the fiCVE-2014-1250565.3A vulnerability was found in Pylons horus and classified as problematic. Affected by this issue is some unknown functionality of the file hoCVE-2014-1250579.8A vulnerability was found in mrobit robitailletheknot. It has been classified as problematic. This affects an unknown part of the file app/fCVE-2014-1250589.8A vulnerability was found in LearnMeSomeCodes project3 and classified as critical. This issue affects the function search_first_name of the CVE-2014-1250599.8A vulnerability, which was classified as problematic, has been found in sternenseemann sternenblog. This issue affects the function blog_indCVE-2014-1250609.8A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderSCVE-2014-1250619.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in peel filebroker and classified as critical. Affected by this issue is the funct