SQL Injection in French National Commission On Informatics And Liberty Cookieviz
CVE-2014-8351
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.
Vulnerability class: SQL Injection
EPSS: 0.017 (74.2th percentile) — read the EPSS interpretation.
Affected products
- French_national_commission_on_informatics_and_liberty Cookieviz
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (Exploit, x_refsource_MISC)