EUVD-2014-3457

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

HandsomeWeb SOS Webpages allows bypass of authentication using administrator hash before 1.1.12.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2014-3445	28 Jan 202019:37	–	circl
CVE	CVE-2014-3445	28 Jan 202014:09	–	cve
Cvelist	CVE-2014-3445	28 Jan 202014:09	–	cvelist
NVD	CVE-2014-3445	28 Jan 202015:15	–	nvd
Packet Storm	HandsomeWeb SOS Webpages 1.1.11 Backup / Hash Disclosure	29 May 201400:00	–	packetstorm
Prion	Authentication flaw	28 Jan 202015:15	–	prion
securityvulns	CVE-2014-3445 - Unauthenticated Backup and Password Disclosure in HandsomeWeb SOS Webpages	14 Jun 201400:00	–	securityvulns
securityvulns	Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)	14 Jun 201400:00	–	securityvulns

[
  {
    "enisaIdVendor": [
      {
        "id": "974f33bc-a71d-3048-9053-4ae68d6e387c",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "478cb2b8-4d78-3794-ac64-380f84e39777",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2014-3445
packetstormsecurity	www.packetstormsecurity.com/files/126844/HandsomeWeb-SOS-Webpages-1.1.11-Backup-Hash-Disclosure.html
sourceforge	www.sourceforge.net/projects/soswebpages/files/SOS%20Webpages/SOS%20Webpages%201.1.12/
seclists	www.seclists.org/fulldisclosure/2014/May/130
securityfocus	www.securityfocus.com/bid/67644
portcullis-security	www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3445/
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

CVSS 27.5

EPSS0.04393

backup vulnerability authentication bypass password hash remote attacker