NVD

Id
30529  
Name
CVE-2014-2022  
Description
SQL injection vulnerability in includes/api/4/breadcrumbs_create.php in vBulletin 4.2.2, 4.2.1, 4.2.0 PL2, and earlier allows remote authenticated users to execute arbitrary SQL commands via the conceptid argument in an xmlrpc API request.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-10-15  
Modified Date
2015-08-13  
Seq
2014-2022  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161398 30529 CVE-2014-2022 http://packetstormsecurity.com/files/128696/vBulletin-4.x-SQL-Injection.html  View
161399 30529 CVE-2014-2022 20141013 CVE-2014-2022 - vbulletin 4.x - SQLi in breadcrumbs via xmlrpc API (post-auth)  View
161400 30529 CVE-2014-2022 70417  View
161401 30529 CVE-2014-2022 1031001  View
161402 30529 CVE-2014-2022 https://github.com/tintinweb/pub/tree/master/pocs/cve-2014-2022  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16069 JVNDB-2014-004944 vBulletin の includes/api/4/breadcrumbs_create.php における SQL インジェクションの脆弱性 vBulletin の includes/api/4/breadcrumbs_create.php には、SQL インジェクションの脆弱性が存在します。 CVE-2014-2022 69309 CVE-2014-2022 30529 7.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004944.html 2014-10-13 2014-10-24 View