CVE-2014-3119

CVE-2014-3119 affects web2Project 3.1 and earlier. The vulnerability is due to insufficient sanitization of user inputs, allowing remote authenticated users to inject arbitrary SQL via the POST parameter search_string (index.php, contacts module) or via updatekey (do_updatecontact.php) or updatek...