CVE-2014-8995

Maarch LetterBox 2.8 - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie.

Exploits (1)

exploitdb WORKING POC
by ZoRLu Bugrahan · textwebappsphp
https://www.exploit-db.com/exploits/35271

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/98775
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/114772

Scores

EPSS 0.0127
EPSS Percentile 79.6%

Details

CWE
CWE-89
Status published
Products (1)
maarch/letterbox 2.8
Published Nov 20, 2014
Tracked Since Feb 18, 2026