CVE-2014-125038

CVE-2014-125038 concerns a SQL injection vulnerability in IS_Projecto2, specifically in Cnn-EJB/ejbModule/ejbs/NewsBean.java where the date parameter is manipulated. The issue is described across multiple sources as affecting unknown code paths and enabling injection through the date argument. A ...