CVE-2014-125058

CRITICO 9.8CVE-2014-125058 · Published 07/01/2023 · updated 17/06/2026

In breve

CVE-2014-125058 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda address book (address book project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.74%, superiore al 54.8% delle vulnerabilità.
Correzione: aggiornare a 2014-11-22 o successiva.

Package	Affected versions	Patched versions
address book address_book_project	`< 2014-11-22`	`2014-11-22`

Description

A vulnerability was found in LearnMeSomeCodes project3 and classified as critical. This issue affects the function search_first_name of the file search.rb. The manipulation leads to sql injection. The patch is named d3efa17ae9f6b2fc25a6bbcf165cefed17c7035e. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217607. NOTE: Maintainer is aware of this issue as remarked in the source code.

References

LearnMeSomeCodes/project3 commit d3efa17 · Patch
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free