CVE-2014-1597

🗓️ 27 Feb 2014 15:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 43 Views🌐 WEB

SQL injection vulnerability in CMDB web app, allows remote attackers to execute arbitrary SQL command

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2014-1597	17 Feb 201400:00	–	circl
Cvelist	CVE-2014-1597	27 Feb 201415:00	–	cvelist
EUVD	EUVD-2014-1673	7 Oct 202500:30	–	euvd
NVD	CVE-2014-1597	27 Feb 201415:55	–	nvd
Prion	Sql injection	27 Feb 201415:55	–	prion
seebug.org	i-doit Pro 'objID'参数SQL注入漏洞	20 Feb 201400:00	–	seebug

NVD

Node

i-doit i-doitRange≤1.2.4pro

i-doit i-doitMatch1.0.2pro

i-doit i-doitMatch1.1.1pro

i-doit i-doitMatch1.1.2pro

i-doit i-doitMatch1.2.1pro

i-doit i-doitMatch1.2.2pro

i-doit i-doitMatch1.2.3pro

Source	Link
i-doit	www.i-doit.com/en/company/news/single-news/
securityfocus	www.securityfocus.com/bid/65557
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/91269
csnc	www.csnc.ch/misc/files/advisories/CVE-2014-1597_i-doit_SQL_Injection.txt
archives	www.archives.neohapsis.com/archives/fulldisclosure/2014-02/0154.html
secunia	www.secunia.com/advisories/56931

Parameter	Position	Path	Description	CWE
objID	query param	/?objID=[SQL Injection]	SQL injection vulnerability in CMDB web application via objID parameter	CWE-89

29 Apr 2026 01:13Current

8.7High risk

Vulners AI Score8.7

CVSS 27.5

EPSS0.00583