VDB-218005 · CVE-2014-125074 · GCVE-100-218005

Nayshlok Voyager DatabaseAccess.java SQL Injection

Gaskiya vulnerability da aka ware a matsayin kura an samu a Nayshlok Voyager. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil Voyager/src/models/DatabaseAccess.java, a cikin sashen $software_component. A sa manipulation ka SQL Injection. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-89. Hakika, rauni an bayyana shi 01/11/2023 kamar f1249f438cd8c39e7ef2f6c8f2ab76b239a02fae. An raba bayanin tsaro don saukewa a github.com. Wannan matsala ana saninta da CVE-2014-125074. Ana bukatar samun damar shiga local network ɗin don wannan hari ya yi nasara. Tekinikal faɗi ga. Babu exploit ɗin da ake samu. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á sàmbu a wondi feere. 0-day shima, an ndiyam a wuro be $0-$5k. Ana kiran patch ɗin da f1249f438cd8c39e7ef2f6c8f2ab76b239a02fae. Gyaran matsalar yana nan a shirye don saukewa a github.com. Ana shawartar a saka patch domin warware wannan matsala. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Waktin goyi

Màdùmga

VulDB Mod Team	71

Furɗe

cvss3_meta_tempscore	2
cvss3_meta_basescore	2
cvss3_cna_basescore	1
cvss3_nvd_basescore	1
cvss2_nvd_basescore	1

Commit Conf

90%	33
70%	25
50%	13

Approve Conf

90%	33
70%	25
80%	13

71 Kari

ID	Sanda	Màdùmga	Furɗe	Gargajiya	Garga	Gargajiya	Jawan	C
13621223	02/01/2023	VulDB…	cvss3_cna_basescore	5.5	see CVSS documentation	02/01/2023	shingilam	90
13621222	02/01/2023	VulDB…	cvss3_nvd_basescore	9.8	nist.gov	02/01/2023	shingilam	90
13621221	02/01/2023	VulDB…	cvss2_nvd_basescore	5.2	nist.gov	02/01/2023	shingilam	90
13621220	02/01/2023	VulDB…	cvss3_meta_tempscore	6.9	see CVSS documentation	02/01/2023	shingilam	90
13621219	02/01/2023	VulDB…	cvss3_meta_basescore	6.9	see CVSS documentation	02/01/2023	shingilam	90
13621218	02/01/2023	VulDB…	cve_cna	VulDB	nvd.nist.gov	02/01/2023	shingilam	70
13621217	02/01/2023	VulDB…	cvss3_cna_a	L	nvd.nist.gov	02/01/2023	shingilam	70
13621216	02/01/2023	VulDB…	cvss3_cna_i	L	nvd.nist.gov	02/01/2023	shingilam	70
13621215	02/01/2023	VulDB…	cvss3_cna_c	L	nvd.nist.gov	02/01/2023	shingilam	70
13621214	02/01/2023	VulDB…	cvss3_cna_s	U	nvd.nist.gov	02/01/2023	shingilam	70
13621213	02/01/2023	VulDB…	cvss3_cna_ui	N	nvd.nist.gov	02/01/2023	shingilam	70
13621212	02/01/2023	VulDB…	cvss3_cna_pr	L	nvd.nist.gov	02/01/2023	shingilam	70
13621211	02/01/2023	VulDB…	cvss3_cna_ac	L	nvd.nist.gov	02/01/2023	shingilam	70
13621210	02/01/2023	VulDB…	cvss3_cna_av	A	nvd.nist.gov	02/01/2023	shingilam	70
13621209	02/01/2023	VulDB…	cvss2_nvd_ai	P	nvd.nist.gov	02/01/2023	shingilam	70
13621208	02/01/2023	VulDB…	cvss2_nvd_ii	P	nvd.nist.gov	02/01/2023	shingilam	70
13621207	02/01/2023	VulDB…	cvss2_nvd_ci	P	nvd.nist.gov	02/01/2023	shingilam	70
13621206	02/01/2023	VulDB…	cvss2_nvd_au	S	nvd.nist.gov	02/01/2023	shingilam	70
13621205	02/01/2023	VulDB…	cvss2_nvd_ac	L	nvd.nist.gov	02/01/2023	shingilam	70
13621204	02/01/2023	VulDB…	cvss2_nvd_av	A	nvd.nist.gov	02/01/2023	shingilam	70