CVE-2014-125029 ttskch PaginationServiceProvider Demo index.php sql injection
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2014-125029?
CVE-2014-125029 is a medium-severity vulnerability in ttskch PaginationServiceProvider, published on 7 Jan 2023.
Official description
A vulnerability was found in ttskch PaginationServiceProvider up to 0.x. It has been declared as critical. This vulnerability affects unknown code of the file demo/index.php of the component demo. The manipulation of the argument sort/id leads to sql injection. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as 619de478efce17ece1a3b913ab16e40651e1ea7b. It is recommended to upgrade the affected component. VDB-217150 is the identifier assigned to this vulnerability.
Weakness: CWE-89
Which versions are affected by CVE-2014-125029?
2 open source packages ship an affected version, including ttskch/pagination-service-provider. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
ttskch/pagination-service-provider Packagist | All versions | 1.0.0 |
ttskch/pagination-service-provider Packagist | All versions | 1.0.0 |
Products include Paginationserviceprovider Project Paginationserviceprovider.
How do I fix CVE-2014-125029?
Upgrade ttskch/pagination-service-provider to 1.0.0 or later.
Is CVE-2014-125029 being exploited?
There is no known exploitation of CVE-2014-125029 in the wild and no public exploit code.
Sources
Also known as GHSA-ww43-mcvh-35p4.