CVE-2014-3962

Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to (1) videocat.php or (2) single.php.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.35% chance of exploitation in the next 30 days, 83rd percentile

Published

2014-06-04

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/33514

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33514

Security advisories

• http://www.securityfocus.com/bid/67766

References

• CVE Record
• NVD entry