CVE-2014-125053

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the file include/guestbook.inc.php of the component Navigation Bar. The manipulation of the argument start leads to sql injection. Upgrading to version 1.3.1 is able to address this issue. The patch is identified as 0cdd1c388edf15089c3a7541cefe7756e560581d. It is recommended to upgrade the affected component. VDB-217582 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jan 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-1250544.3A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote Han CVE-2014-1250555.3A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the fi CVE-2014-1250565.3A vulnerability was found in Pylons horus and classified as problematic. Affected by this issue is some unknown functionality of the file ho CVE-2014-1250579.8A vulnerability was found in mrobit robitailletheknot. It has been classified as problematic. This affects an unknown part of the file app/f CVE-2014-1250589.8A vulnerability was found in LearnMeSomeCodes project3 and classified as critical. This issue affects the function search_first_name of the CVE-2014-1250599.8A vulnerability, which was classified as problematic, has been found in sternenseemann sternenblog. This issue affects the function blog_ind CVE-2014-1250609.8A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderS CVE-2014-1250619.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in peel filebroker and classified as critical. Affected by this issue is the funct CVE-2014-1250629.8A vulnerability classified as critical was found in ananich bitstorm. Affected by this vulnerability is an unknown functionality of the file CVE-2014-1250639.8A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads CVE-2014-1250659.8A vulnerability, which was classified as critical, was found in john5223 bottle-auth. Affected is an unknown function. The manipulation lead CVE-2014-1250667.5A vulnerability was found in emmflo yuko-bot. It has been declared as problematic. This vulnerability affects unknown code. The manipulation