Lucene search
CertccCVE-2014-2934HistoryMay 08, 2014 - 10:55 a.m.
CVE-2014-2934
2014-05-0810:55:04
CWE-89
certcc
web.nvd.nist.gov
26
cve
2014
2934
sql injection
caldera 9.20
remote attackers
arbitrary commands
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.8
Confidence
Low
EPSS
0.001
Percentile
40.8%
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php.
Affected configurations
Node
calderacalderaMatch9.20
References
Related
exploitdb
exploitdb
Caldera - '/costview2/jobs.php?tr' SQL Injection
2014-05-07 00:00:00
Caldera - '/costview2/printers.php?tr' SQL Injection
2014-05-07 00:00:00
prion
prion
Sql injection
2014-05-08 10:55:00
cvelist
cvelist
CVE-2014-2934
2014-05-08 10:00:00
nvd
nvd
CVE-2014-2934
2014-05-08 10:55:04
cert
cert
Caldera 9.20 contains multiple vulnerabilities
2014-05-07 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.8
Confidence
Low
EPSS
0.001
Percentile
40.8%
Related for CVE-2014-2934