Description
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/98454
Patch x_refsource_confirm
https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2
Exploit mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Nov/3
Exploit x_refsource_misc
http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
Scores
EPSS
0.0166
EPSS Percentile
74.1%
Details
CWE
CWE-89
Status
published
Products (1)
french_national_commission_on_informatics_and_liberty/cookieviz
< 1.0
Published
Nov 06, 2014
Tracked Since
Feb 18, 2026