CVE-2014-125077

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in pointhi searx_stats. This issue affects some unknown processing of the file cgi/cron.php. The manipulation leads to sql injection. The patch is named 281bd679a4474ddb222d16c1c380f252839cc18f. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218351.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
pointhi	searx_stats	n/a

References

https://github.com/pointhi/searx_stats/commit/281bd679a4474ddb222d16c1c380f252839cc18fPatch
https://vuldb.com/?ctiid.218351Permissions Required, Third Party Advisory
https://vuldb.com/?id.218351Third Party Advisory
https://github.com/pointhi/searx_stats/commit/281bd679a4474ddb222d16c1c380f252839cc18fPatch
https://vuldb.com/?ctiid.218351Permissions Required, Third Party Advisory
https://vuldb.com/?id.218351Third Party Advisory

Timeline

Published: Jan 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-1250785.4A vulnerability was found in yanheven console and classified as problematic. Affected by this issue is some unknown functionality of the fil CVE-2014-1250799.8A vulnerability was found in agy pontifex.http. It has been declared as critical. This vulnerability affects unknown code of the file lib/Ht CVE-2014-1250809.8A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipula CVE-2014-1250819.8A vulnerability, which was classified as critical, has been found in risheesh debutsav. This issue affects some unknown processing. The mani CVE-2014-1250829.8A vulnerability was found in nivit redports. It has been declared as critical. This vulnerability affects unknown code of the file redports-CVE-2014-1250839.8A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulne CVE-2014-1250849.8A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin. This issue affects some unknown proce CVE-2014-1250859.8A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the fil CVE-2014-1250869.8A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical. Affected by this vulnerability is an unknown CVE-2014-1250879.8A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionali CVE-2014-1250886.1A vulnerability was found in qt-users-jp silk 0.0.1. It has been declared as problematic. This vulnerability affects unknown code of the fil CVE-2014-1250896.1A vulnerability was found in cention-chatserver 3.8.0-rc1. It has been declared as problematic. Affected by this vulnerability is the functi