CVE-2014-10023

Topicsviewer - SQL Injection

Title source: rule
STIX 2.1

Description

Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) edit_block.php, (2) edit_cat.php, (3) edit_note.php, or (4) rmv_topic.php in admincp/.

Exploits (1)

exploitdb WORKING POC
by AtT4CKxT3rR0r1ST · textwebappsphp
https://www.exploit-db.com/exploits/31419

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/102834
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/65283
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/90918
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/31419
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/102836
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/102837
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/102835

Scores

EPSS 0.0408
EPSS Percentile 88.6%

Details

CWE
CWE-89
Status published
Products (1)
topicsviewer/topicsviewer 3.0 beta1
Published Jan 13, 2015
Tracked Since Feb 18, 2026