CVE-2014-125059

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, has been found in sternenseemann sternenblog. This issue affects the function blog_index of the file main.c. The manipulation of the argument post_path leads to file inclusion. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 0.1.0 is able to address this issue. The identifier of the patch is cf715d911d8ce17969a7926dea651e930c27e71a. It is recommended to upgrade the affected component. The identifier VDB-217613 was assigned to this vulnerability. NOTE: This case is rather theoretical and probably won't happen. Maybe only on obscure Web servers.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-73

Affected software

No affected versions have been published.

Timeline

Published: Jan 7, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-1250609.8A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderS CVE-2014-1250619.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in peel filebroker and classified as critical. Affected by this issue is the funct CVE-2014-1250629.8A vulnerability classified as critical was found in ananich bitstorm. Affected by this vulnerability is an unknown functionality of the file CVE-2014-1250639.8A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads CVE-2014-1250659.8A vulnerability, which was classified as critical, was found in john5223 bottle-auth. Affected is an unknown function. The manipulation lead CVE-2014-1250667.5A vulnerability was found in emmflo yuko-bot. It has been declared as problematic. This vulnerability affects unknown code. The manipulation CVE-2014-1250679.8A vulnerability classified as critical was found in corincerami curiosity. Affected by this vulnerability is an unknown functionality of the CVE-2014-1250685.3A vulnerability was found in saxman maps-js-icoads and classified as critical. This issue affects some unknown processing of the file http-s CVE-2014-1250695.3A vulnerability was found in saxman maps-js-icoads. It has been classified as problematic. Affected is an unknown function. The manipulation CVE-2014-1250706.1A vulnerability has been found in yanheven console and classified as problematic. Affected by this vulnerability is the function get_zone_ho CVE-2014-1250719.8A vulnerability was found in lukehutch Gribbit. It has been classified as problematic. Affected is the function messageReceived of the file CVE-2014-1250728.8A vulnerability classified as critical has been found in CherishSin klattr. This affects an unknown part. The manipulation leads to sql inje