CVE-2014-4307

WebTitan <4.04 - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter.

Exploits (1)

exploitdb WRITEUP
by SEC Consult · textwebappsphp
https://www.exploit-db.com/exploits/33699

References (2)

Core 2

Scores

EPSS 0.0071
EPSS Percentile 72.2%

Details

CWE
CWE-89
Status published
Products (1)
webtitan/webtitan < 4.01
Published Jun 18, 2014
Tracked Since Feb 18, 2026