What is CVE-2014-5185?

CVE-2014-5185 is a vulnerability in Quartz Plugin Project, classified under SQL Injection. Published 2014-08-06.

Is CVE-2014-5185 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Quartz Plugin Project

CVE-2014-5185

SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quote_form.php page to wp-admin/edit.php.

Vulnerability class: SQL Injection

EPSS: 0.019 (78.1th percentile) — read the EPSS interpretation.

Affected products

Quartz_plugin_project Quartz_plugin — versions 1.01.1
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-5185?: CVE-2014-5185 is a vulnerability in Quartz Plugin Project, classified under SQL Injection. Published 2014-08-06.
Is CVE-2014-5185 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.