CVE-2014-3871

Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (formerly GeoClassifieds and GeoAuctions) allow remote attackers…

published May 27, 2014

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (formerly GeoClassifieds and GeoAuctions) allow remote attackers to execute arbitrary SQL commands via the (1) c[password] or (2) c[username] parameter. NOTE: the b parameter to index.php vector is already covered by CVE-2006-3823.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02555 · 84.9th percentile
Published
2014-05-27T14:00Z
EPSS history
Timeline
  • 27 MAY 14:00Z
    Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (formerly GeoClassifieds and GeoAuctions) allow remote attackers…
    cvelistv5