SQL Injection Vulnerability in HumHub Product by HumHub Inc.
CVE-2014-9528

Currently unrated

Key Information:

Vendor: Humhub
Status: Humhub
Vendor: CVE Published:; 6 January 2015

What is CVE-2014-9528?

A SQL injection vulnerability exists in the actionIndex function of the ListController in HumHub, allowing remote authenticated users to input malicious SQL commands through the 'from' parameter of index.php. This flaw not only permits unauthorized database access but may also be exploited to facilitate cross-site scripting (XSS) attacks if an error response is generated, increasing the risk of user data compromise.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch