NVD

Id
31890  
Name
CVE-2014-3783  
Description
SQL injection vulnerability in admin/categories.php in Dotclear before 2.6.3 allows remote authenticated users with the manage categories permission to execute arbitrary SQL commands via the categories_order parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-05-22  
Modified Date
2015-07-31  
Seq
2014-3783  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168154 31890 CVE-2014-3783 http://dotclear.org/blog/post/2014/05/16/Dotclear-2.6.3  View
168155 31890 CVE-2014-3783 http://karmainsecurity.com/KIS-2014-07  View
168156 31890 CVE-2014-3783 http://packetstormsecurity.com/files/126768/Dotclear-2.6.2-SQL-Injection.html  View
168157 31890 CVE-2014-3783 20140521 [KIS-2014-07] Dotclear <= 2.6.2 (categories.php) SQL Injection Vulnerability  View
168158 31890 CVE-2014-3783 20140521 [KIS-2014-07] Dotclear <= 2.6.2 (categories.php) SQL Injection Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13715 JVNDB-2014-002590 Dotclear の admin/categories.php における SQL インジェクションの脆弱性 Dotclear の admin/categories.php には、SQL インジェクションの脆弱性が存在します。 CVE-2014-3783 71071 CVE-2014-3783 31890 6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002590.html 2014-05-16 2014-06-03 View