Lucene search
HistoryJun 19, 2014 - 2:55 p.m.
CVE-2014-4333
csrf
vulnerability
administration
profiles.php
sql injection
dolphin 7.1.4
cve-2014-4333
cve-2014-3810
8 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
69.2%
Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the members[] parameter, related to CVE-2014-3810.
Affected configurations
Node
boonexdolphinRange≤7.1.4
ORboonexdolphinMatch7.0.0
ORboonexdolphinMatch7.0.1
ORboonexdolphinMatch7.0.2
ORboonexdolphinMatch7.0.3
ORboonexdolphinMatch7.0.3beta
ORboonexdolphinMatch7.0.4
ORboonexdolphinMatch7.0.5
ORboonexdolphinMatch7.0.6
ORboonexdolphinMatch7.0.7
ORboonexdolphinMatch7.0.8
ORboonexdolphinMatch7.0.9
ORboonexdolphinMatch7.1.0
ORboonexdolphinMatch7.1.0b1
ORboonexdolphinMatch7.1.0b2
ORboonexdolphinMatch7.1.1
ORboonexdolphinMatch7.1.2
ORboonexdolphinMatch7.1.3
Related
nvd
nvd
CVE-2014-4333
2014-06-19 14:55:08
CVE-2014-3810
2014-06-19 14:55:07
cve
cve
CVE-2014-3810
2014-06-19 14:55:07
prion
prion
Sql injection
2014-06-19 14:55:00
Cross site request forgery (csrf)
2014-06-19 14:55:00
cvelist
cvelist
CVE-2014-4333
2014-06-19 14:00:00
CVE-2014-3810
2014-06-19 14:00:00
packetstorm
packetstorm
Dolphin 7.1.4 SQL Injection
2014-06-18 00:00:00
securityvulns
securityvulns
SQL Injection in Dolphin
2014-10-15 00:00:00
htbridge
htbridge
SQL Injection in Dolphin | HTB23216
2014-05-21 00:00:00
zdt
zdt
Dolphin 7.1.4 SQL Injection Vulnerability
2014-06-19 00:00:00
8 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
69.2%
Related for CVE-2014-4333