Vulnerability Description
SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional (aka AWP PRO) 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the group_id parameter in a list_zone action to cgi/client.cgi.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Guruperl | Advertise With Pleasure\! | <= 6.6 |
Related Weaknesses (CWE)
References
- http://osvdb.org/show/osvdb/115317
- http://packetstormsecurity.com/files/129390/Advertise-With-Pleasure-AWP-6.6-SQL-Exploit
- http://www.exploit-db.com/exploits/35463Exploit
- http://osvdb.org/show/osvdb/115317
- http://packetstormsecurity.com/files/129390/Advertise-With-Pleasure-AWP-6.6-SQL-Exploit
- http://www.exploit-db.com/exploits/35463Exploit
FAQ
What is CVE-2014-9345?
CVE-2014-9345 is a vulnerability with a CVSS score of 7.5 (HIGH). SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional (aka AWP PRO) 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the group_id parameter in ...
How severe is CVE-2014-9345?
CVE-2014-9345 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-9345?
Check the references section above for vendor advisories and patch information. Affected products include: Guruperl Advertise With Pleasure\!.