CVE-2014-2317

SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the table parameter. NOTE: some of these details are obtained from third party information.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2014-03-09

Last modified

2024-09-17

Weaknesses

CWE-89

Affected products

• Opendocman (Opendocman)

References

• http://secunia.com/advisories/56189
• http://www.opendocman.com/opendocman-v1-2-7-2-released
• http://www.securityfocus.com/bid/65775