CVE-2014-2351CWE-89

CSWorks SQL Injection

High · published May 20, 2014

CVSS v2.0
7.5
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests.

The record
Technical detail
CVSS v2.0
7.5 · HIGH
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.02505 · 84.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2014-05-20T10:00Z
EPSS history
Timeline
  • 20 MAY 10:00Z
    CSWorks SQL Injection
    cvelistv5