NVD

Id
35525  
Name
CVE-2014-8498  
Description
SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allows remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-17  
Modified Date
2015-02-18  
Seq
2014-8498  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181922 35525 CVE-2014-8498 http://packetstormsecurity.com/files/129036/Password-Manager-Pro-SQL-Injection.html  View
181923 35525 CVE-2014-8498 20141109 [The ManageOwnage Series, part VII]: Super admin privesc + password DB dump in Password Manager Pro  View
181924 35525 CVE-2014-8498 35210  View
181925 35525 CVE-2014-8498 71016  View
181926 35525 CVE-2014-8498 passwordmanager-cve20148498-sql-injection(98596)  View
181927 35525 CVE-2014-8498 https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_pmp_privesc.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16613 JVNDB-2014-005488 ManageEngine Password Manager Pro および Password Manager Pro Managed Service Providers の BulkEditSearchResult.cc における SQL インジェクションの脆弱性 ManageEngine Password Manager Pro (PMP) および Password Manager Pro Managed Service Providers (MSP) edition の BulkEditSearchResult.cc には、SQL インジェクションの脆弱性が存在します。 CVE-2014-8498 75791 CVE-2014-8498 35525 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005488.html 2014-11-08 2014-11-18 View