high7.5Public exploit code
CVE-2014-9347
SQL injection vulnerability in dosearch.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the words_exact parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHPMyRecipes 1.2.2 - 'dosearch.php?words_exact' SQL Injection2014-11-25 · webapps · php
Impact
SQL injection vulnerability in dosearch.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the words_exact parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyrecipes Project | Phpmyrecipes | Version 1.2.2 |