NVD

Id
30465  
Name
CVE-2014-1945  
Description
SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the add_value parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-09  
Modified Date
2014-03-10  
Seq
2014-1945  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161167 30465 CVE-2014-1945 http://www.opendocman.com/opendocman-v1-2-7-1-release  View
161168 30465 CVE-2014-1945 http://www.opendocman.com/opendocman-v1-2-7-2-released  View
161169 30465 CVE-2014-1945 65775  View
161170 30465 CVE-2014-1945 https://www.htbridge.com/advisory/HTB23202  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12721 JVNDB-2014-001596 OpenDocMan の ajax_udf.php における SQL インジェクションの脆弱性 OpenDocMan の ajax_udf.php には、SQL インジェクションの脆弱性が存在します。 CVE-2014-1945 69232 CVE-2014-1945 30465 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001596.html 2014-02-24 2014-03-11 View