CVE-2014-125053 Piwigo-Guest-Book Navigation Bar guestbook.inc.php sql injection
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2014-125053?
CVE-2014-125053 is a medium-severity vulnerability in Piwigo-Guest-Book, published on 6 Jan 2023.
Official description
A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the file include/guestbook.inc.php of the component Navigation Bar. The manipulation of the argument start leads to sql injection. Upgrading to version 1.3.1 is able to address this issue. The patch is identified as 0cdd1c388edf15089c3a7541cefe7756e560581d. It is recommended to upgrade the affected component. VDB-217582 is the identifier assigned to this vulnerability.
Weakness: CWE-89
Which versions are affected by CVE-2014-125053?
It affects 1 product.
Products include Piwigo Guestbook.
How do I fix CVE-2014-125053?
No fix has been published for CVE-2014-125053 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-125053 being exploited?
There is no known exploitation of CVE-2014-125053 in the wild and no public exploit code.
Sources
Also known as GHSA-5rx9-6x57-42f7.