CVE-2014-2022
HIGH 7.1EPSS 2.7%
SQL injection vulnerability in includes/api/4/breadcrumbs_create.php in vBulletin 4.2.2, 4.2.1, 4.2.0 PL2, and earlier allows remote authenticated users to execute arbitrary SQL commands via the conceptid argument in an xmlrpc API request.
- CVSS v2.0 NVD
- 7.1 HIGH
AV:N/AC:H/Au:S/C:C/I:C/A:C - EPSS
- 2.71% chance of exploitation in the next 30 days, 86th percentile
- Published
- 2014-10-15
- Updated
- 2024-08-06