CVE-2014-8339

SQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ch parameter...

CVE-2014-8339

CVE-2014-8339 describes a SQL injection in midroll.php of Nuevolabs Nuevoplayer for ClipShare (version 8.0 and earlier). The root cause is unsanitized input via the ch parameter, allowing remote attackers to execute arbitrary SQL commands. Impact stated includes potential reading of information f...