tbezman school-store sql injection

EntryDiffrelatejsonxmlCTI

A vulnerability classified as critical has been found in tbezman school-store. This affects an unknown part. The manipulation leads to sql injection. The CWE definition for the vulnerability is CWE-89. The weakness was disclosed 01/06/2023 as 2957fc97054216d3a393f1775efd01ae2b072001. The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2014-125047. The attack needs to be initiated within the local network. There are no technical details available. There is no exploit available. The price for an exploit might be around USD $0-$5k at the moment. MITRE ATT&CK project uses the attack technique T1505 for this issue. It is declared as not defined. We expect the 0-day to have been worth approximately $0-$5k. The identifier of the patch is 2957fc97054216d3a393f1775efd01ae2b072001. The bugfix is ready for download at github.com. It is recommended to apply a patch to fix this issue.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

VulDB Mod Team	70

Field

cvss3_meta_tempscore	2
cvss3_meta_basescore	2
cvss3_cna_basescore	1
cvss3_nvd_basescore	1
cvss2_nvd_basescore	1

Commit Conf

90%	32
70%	25
50%	13

Approve Conf

90%	32
70%	25
80%	13

70 Commits

ID	Commited	User	Field	Change	Remarks	Moderation	Response	C
13607188	01/29/2023	VulDB…	cvss3_cna_basescore	5.5	see CVSS documentation	01/29/2023	accepted	90
13607187	01/29/2023	VulDB…	cvss3_nvd_basescore	9.8	nist.gov	01/29/2023	accepted	90
13607186	01/29/2023	VulDB…	cvss2_nvd_basescore	5.2	nist.gov	01/29/2023	accepted	90
13607185	01/29/2023	VulDB…	cvss3_meta_tempscore	6.9	see CVSS documentation	01/29/2023	accepted	90
13607184	01/29/2023	VulDB…	cvss3_meta_basescore	6.9	see CVSS documentation	01/29/2023	accepted	90
13607183	01/29/2023	VulDB…	cve_cna	VulDB	nvd.nist.gov	01/29/2023	accepted	70
13607182	01/29/2023	VulDB…	cvss3_cna_a	L	nvd.nist.gov	01/29/2023	accepted	70
13607181	01/29/2023	VulDB…	cvss3_cna_i	L	nvd.nist.gov	01/29/2023	accepted	70
13607180	01/29/2023	VulDB…	cvss3_cna_c	L	nvd.nist.gov	01/29/2023	accepted	70
13607179	01/29/2023	VulDB…	cvss3_cna_s	U	nvd.nist.gov	01/29/2023	accepted	70
13607178	01/29/2023	VulDB…	cvss3_cna_ui	N	nvd.nist.gov	01/29/2023	accepted	70
13607177	01/29/2023	VulDB…	cvss3_cna_pr	L	nvd.nist.gov	01/29/2023	accepted	70
13607176	01/29/2023	VulDB…	cvss3_cna_ac	L	nvd.nist.gov	01/29/2023	accepted	70
13607175	01/29/2023	VulDB…	cvss3_cna_av	A	nvd.nist.gov	01/29/2023	accepted	70
13607174	01/29/2023	VulDB…	cvss2_nvd_ai	P	nvd.nist.gov	01/29/2023	accepted	70
13607173	01/29/2023	VulDB…	cvss2_nvd_ii	P	nvd.nist.gov	01/29/2023	accepted	70
13607172	01/29/2023	VulDB…	cvss2_nvd_ci	P	nvd.nist.gov	01/29/2023	accepted	70
13607171	01/29/2023	VulDB…	cvss2_nvd_au	S	nvd.nist.gov	01/29/2023	accepted	70
13607170	01/29/2023	VulDB…	cvss2_nvd_ac	L	nvd.nist.gov	01/29/2023	accepted	70
13607169	01/29/2023	VulDB…	cvss2_nvd_av	A	nvd.nist.gov	01/29/2023	accepted	70

50 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 50 results.

◂ Previous Overview Next ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!