Unscored severity · published Jan 2, 2015
CVE-2014-9440
SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the category parameter
–
CVSS
2.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the category parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpmyrecipes · Phpmyrecipes Project
1.2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-9440
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-9440
packetstormsecurity.com
http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html
Exploit
http://www.exploit-db.com/exploits/35591
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/99531
More from Phpmyrecipes
–
CVE-2014-9347
SQL injection vulnerability in dosearch.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the words_exact parameter