SQL Injection Vulnerability in OSClass by Nihon-Jin
CVE-2014-8083

Currently unrated

Key Information:

Vendor

Osclass

Status
Osclass
Vendor
CVE Published:
5 January 2015

What is CVE-2014-8083?

An SQL injection vulnerability exists in the Search::setJsonAlert method of OSClass versions prior to 3.4.3. This flaw allows remote attackers to manipulate SQL queries through the alert parameter in search alert subscription actions. By exploiting this vulnerability, attackers can execute arbitrary SQL commands, potentially leading to unauthorized data access or manipulation within the database.

References

http://karmainsecurity.com/KIS-2014-14
x_refsource_MISC
http://seclists.org/fulldisclosure/2014/Dec/132
mailing-listx_refsource_FULLDISC
http://blog.osclass.org/2014/10/09/osclass-3-4-3-ready-do...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.