SQL Injection Vulnerability in OpenDocMan Affects User Data Security
CVE-2014-2317

Currently unrated

Key Information:

Vendor

Opendocman

Status
Opendocman
Vendor
CVE Published:
9 March 2014

What is CVE-2014-2317?

An SQL injection vulnerability exists in the ajax_udf.php file in OpenDocMan versions prior to 1.2.7.2, which enables remote attackers to execute arbitrary SQL commands via the table parameter. This flaw can compromise database integrity and expose sensitive user information, making it critical for users to update their installations to mitigate potential risks.

References

http://www.securityfocus.com/bid/65775
vdb-entryx_refsource_BID
http://secunia.com/advisories/56189
third-party-advisoryx_refsource_SECUNIA
http://www.opendocman.com/opendocman-v1-2-7-2-released
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.