CVE-2014-9445

HIGH 7.5CVE-2014-9445 · Published 02/01/2015 · updated 17/06/2026

In short

CVE-2014-9445 is a HIGH (CVSS 7.5) vulnerability affecting gatequest file manager (installatron).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gatequest file manager installatron	`= 0.2.5`	No fix yet

Description

SQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows remote attackers to execute arbitrary SQL commands via the create parameter to index.php. NOTE: this can be leveraged for cross-site scripting (XSS) attacks by creating a file that generates an error. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; see CVE-2014-1137 for more information.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free