high7.5Public exploit code
CVE-2014-1945
SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the add_value parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenDocMan 1.2.7 - Multiple Vulnerabilities2014-03-05 · webapps · php
Impact
SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the add_value parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opendocman | Opendocman | through 1.2.7.1 Versions 1.2.6.2, 1.2.6.3, 1.2.6.5, 1.2.6.6, 1.2.6.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/56189
- http://www.opendocman.com/opendocman-v1-2-7-1-release
- http://www.opendocman.com/opendocman-v1-2-7-2-released
- http://www.securityfocus.com/bid/65775
- https://www.htbridge.com/advisory/HTB23202
- http://secunia.com/advisories/56189
- http://www.opendocman.com/opendocman-v1-2-7-1-release
- http://www.opendocman.com/opendocman-v1-2-7-2-released
- http://www.securityfocus.com/bid/65775
- https://www.htbridge.com/advisory/HTB23202