Vulnerability Details CVE-2014-8351
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
- http://seclists.org/fulldisclosure/2014/Nov/3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98454
- https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2
- http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
- http://seclists.org/fulldisclosure/2014/Nov/3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98454
- https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2
Products affected by CVE-2014-8351
-
cpe:2.3:a:french_national_commission_on_informatics_and_liberty:cookieviz:-
-
cpe:2.3:a:french_national_commission_on_informatics_and_liberty:cookieviz:1.0