NuytsTech Security

CVE-2014-3810

by ·

SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the members[] parameter. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-4333.

Date published : 2014-06-19

http://www.securityfocus.com/bid/68091

http://www.securityfocus.com/archive/1/532468/100/0/threaded

Tags: