NVD

Id
35604  
Name
CVE-2014-8596  
Description
Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the (1) submit_id parameter in a 2 action to files/administration/submissions.php or (2) status parameter to files/administration/members.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-17  
Modified Date
2014-11-17  
Seq
2014-8596  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182271 35604 CVE-2014-8596 http://packetstormsecurity.com/files/129053/PHP-Fusion-7.02.07-SQL-Injection.html  View
182272 35604 CVE-2014-8596 35206  View
182273 35604 CVE-2014-8596 71053  View
182274 35604 CVE-2014-8596 php-fusion-cve20148596-sql-injection(98583)  View
182275 35604 CVE-2014-8596 https://www.xlabs.com.br/blog/?p=282  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16616 JVNDB-2014-005491 PHP-Fusion における SQL インジェクションの脆弱性 PHP-Fusion には、SQL インジェクションの脆弱性が存在します。 CVE-2014-8596 75889 CVE-2014-8596 35604 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005491.html 2014-08-06 2014-11-19 View