Lucene search
HistoryMay 08, 2014 - 10:55 a.m.
CVE-2014-2934
cve
2014
2934
sql injection
caldera 9.20
remote attackers
arbitrary commands
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.9%
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php.
Affected configurations
Node
calderacalderaMatch9.20
| CPE | Name | Operator | Version |
|---|---|---|---|
| caldera:caldera | caldera | eq | 9.20 |
References
Related
prion
prion
Sql injection
2014-05-08 10:55:00
cvelist
cvelist
CVE-2014-2934
2014-05-08 10:00:00
nvd
nvd
CVE-2014-2934
2014-05-08 10:55:04
cert
cert
Caldera 9.20 contains multiple vulnerabilities
2014-05-07 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.9%
Related for CVE-2014-2934