CVE-2014-1466

Description

SQL injection vulnerability in CSP MySQL User Manager 2.3 allows remote attackers to execute arbitrary SQL commands via the login field of the login page.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/90210

http://www.securityfocus.com/bid/64731

http://secunia.com/advisories/56348

http://packetstormsecurity.com/files/124724/cspmysql-sql.txt

http://osvdb.org/101867

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS