CVE-2014-4304

MEDIUM 4.3CVE-2014-4304 · Published 18/06/2014 · updated 17/06/2026

In short

CVE-2014-4304 is a MEDIUM (CVSS 4.3) vulnerability affecting sql buddy (sqlbuddy).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sql buddy sqlbuddy	`≤ 1.3.3`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in browse.php in SQL Buddy 1.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter.

References

secunia.com/advisories/59002 · Permissions Required
securityfocus.com/bid/68017 · Third Party Advisory
netsparker.com/critical-xss-vulnerability-in-sql-buddy · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free