CVE-2014-125051

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in himiklab yii2-jqgrid-widget up to 1.0.7. It has been declared as critical. This vulnerability affects the function addSearchOptionsRecursively of the file JqGridAction.php. The manipulation leads to sql injection. Upgrading to version 1.0.8 is able to address this issue. The name of the patch is a117e0f2df729e3ff726968794d9a5ac40e660b9. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217564.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jan 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-1250529.8A vulnerability was found in JervenBolleman sparql-identifiers and classified as critical. This issue affects some unknown processing of the CVE-2014-1250539.8A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the CVE-2014-1250544.3A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote Han CVE-2014-1250555.3A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the fi CVE-2014-1250565.3A vulnerability was found in Pylons horus and classified as problematic. Affected by this issue is some unknown functionality of the file ho CVE-2014-1250579.8A vulnerability was found in mrobit robitailletheknot. It has been classified as problematic. This affects an unknown part of the file app/f CVE-2014-1250589.8A vulnerability was found in LearnMeSomeCodes project3 and classified as critical. This issue affects the function search_first_name of the CVE-2014-1250599.8A vulnerability, which was classified as problematic, has been found in sternenseemann sternenblog. This issue affects the function blog_ind CVE-2014-1250609.8A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderS CVE-2014-1250619.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in peel filebroker and classified as critical. Affected by this issue is the funct CVE-2014-1250629.8A vulnerability classified as critical was found in ananich bitstorm. Affected by this vulnerability is an unknown functionality of the file CVE-2014-1250639.8A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads