Vulnerability Details : CVE-2014-3783
SQL injection vulnerability in admin/categories.php in Dotclear before 2.6.3 allows remote authenticated users with the manage categories permission to execute arbitrary SQL commands via the categories_order parameter.
Vulnerability category: Sql Injection
Products affected by CVE-2014-3783
- cpe:2.3:a:dotclear:dotclear:*:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:1.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:1.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:1.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0:beta_5.2:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0:beta_4:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:1.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0:beta_3:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0:beta_2:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0:beta_7:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0:beta_6:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.0:beta_5.4:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.6:-:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.6:rc:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:dotclear:dotclear:2.6.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-3783
0.26%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 66 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-3783
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.0
|
MEDIUM | AV:N/AC:M/Au:S/C:P/I:P/A:P |
6.8
|
6.4
|
NIST |
CWE ids for CVE-2014-3783
-
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-3783
-
http://seclists.org/fulldisclosure/2014/May/109
Full Disclosure: [KIS-2014-07] Dotclear <= 2.6.2 (categories.php) SQL Injection Vulnerability
-
http://karmainsecurity.com/KIS-2014-07
Dotclear <= 2.6.2 (categories.php) SQL Injection Vulnerability | Karma(In)Security
-
http://packetstormsecurity.com/files/126768/Dotclear-2.6.2-SQL-Injection.html
Dotclear 2.6.2 SQL Injection ≈ Packet Storm
-
http://www.securityfocus.com/archive/1/532185/100/0/threaded
SecurityFocus
-
http://dotclear.org/blog/post/2014/05/16/Dotclear-2.6.3
Dotclear 2.6.3 › Dotclear News › Dotclear › Blog management made easyVendor Advisory
Jump to