CVE-2014-125085
Medium
Description
A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the file trigger_ratethread.php. The manipulation of the argument t/postusername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. The patch is identified as f11a136e9cbd24997354965178728dc22a2aa2ed. It is recommended to upgrade the affected component. VDB-220206 is the identifier assigned to this vulnerability.
SeverityMedium
CVSS5.5
Exploit probability—
ProductGimmie
PublishedFeb 6, 2023
First seenFeb 6, 2023
Weakness typeCWE-89SQL injection
How to fix
Update
- gimmie_project gimmie1.3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gimmie_project gimmie | v < 1.3.0 | 1.3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.