NVD

Id
30947  
Name
CVE-2014-2531  
Description
SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP) before 5.0.14 build 577 allows remote authenticated users to execute arbitrary SQL commands via the i parameter in a search action to the (1) NodeWorx , (2) SiteWorx, or (3) Resellers interface, as demonstrated by the "or" key in a pgn8state object in an i object in a JSON object.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-21  
Modified Date
2014-10-24  
Seq
2014-2531  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162752 30947 CVE-2014-2531 http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel!  View
162753 30947 CVE-2014-2531 32516  View
162754 30947 CVE-2014-2531 20140325 [CVE-2014-2531] SQL injection in InterWorx Web Control Panel <= 5.0.13  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16167 JVNDB-2014-005042 InterWorx Web Control Panel の xhr.php における SQL インジェクションの脆弱性 InterWorx Web Control Panel (別名 InterWorx Hosting Control Panel and InterWorx-CP) の xhr.php には、SQL インジェクションの脆弱性が存在します。 CVE-2014-2531 69818 CVE-2014-2531 30947 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005042.html 2014-03-17 2014-10-28 View