PT-2023-10132 · Unknown · Ananich Bitstorm

Published 2023-01-07 · Updated 2024-05-17 · CVE-2014-125062

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ananich bitstorm (affected versions not specified)

Description A critical issue was found in ananich bitstorm, affecting an unknown functionality of the file announce.php. The manipulation of the event argument leads to SQL injection.

Recommendations To fix this issue, it is recommended to apply a patch.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-125062

Affected Products

Ananich Bitstorm

References · 6

• https://github.com/ananich/bitstorm/commit/ea8da92f94cdb78ee7831e1f7af6258473ab396a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-125062 · Security Note
• https://vuldb.com/?ctiid.217621 · Note
• https://vuldb.com/?id.217621 · Note
• https://t.me/cvenotify/62854 · Telegram Post
• https://t.me/cvenotify/41496 · Telegram Post