CVE-2014-125116
| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | CVE-2014-125116 | 29 May 201815:50 | – | circl |
 | Hybridauth security vulnerability | 25 Jul 202500:00 | – | cnnvd |
 | CVE-2014-125116 HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection | 25 Jul 202515:51 | – | cvelist |
 | EUVD-2014-9808 | 7 Oct 202500:30 | – | euvd |
 | HybridAuth - install.php RCE (CVE-2014-125116) | 4 Sep 202606:36 | – | kittysploit |
| HybridAuth - install.php RCE Detection (CVE-2014-125116) | 10 Aug 202606:19 | – | kittysploit |
 | CVE-2014-125116 | 25 Jul 202515:51 | – | mend |
 | HybridAuth install.php PHP Code Execution | 4 Aug 201400:00 | – | metasploit |
 | CVE-2014-125116 | 25 Jul 202516:15 | – | nvd |
 | HybridAuth <= 2.2.2 'install.php' RCE Vulnerability | 26 Aug 201400:00 | – | openvas |
10
Node
[
{
"defaultStatus": "unaffected",
"modules": [
"install.php"
],
"product": "HybridAuth",
"vendor": "HybridAuth",
"versions": [
{
"lessThanOrEqual": "2.2.2",
"status": "affected",
"version": "2.0.9",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| OPENID_ADAPTER_STATUS | request body | /hybridauth/install.php | PHP code execution via install.php by injecting code that references a base64 payload to be evaluated, enabling later write to config.php. | CWE-306, CWE-434 |
| payload_param (random key used to reference payload) | request body | /hybridauth/install.php | PHP code execution via install.php by injecting code that references a base64 payload to be evaluated, enabling later write to config.php. | CWE-306, CWE-434 |
| payload_param (random key name used to pass base64-encoded payload) | request body | /hybridauth/config.php | Config.php backdoor execution: after install.php writes a backdoor, a base64-encoded payload is POSTed and executed via eval in config.php. | CWE-306, CWE-434 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 00:04Current
6.4Medium risk
Vulners AI Score6.4
CVSS 49.3
EPSS0.02491
SSVC