CVE-2014-8351

High

Description

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.

SeverityHigh
CVSS7.5
Exploit probability—
ProductFrench National Commission On Informatics And Liberty Cookieviz
PublishedNov 6, 2014
First seenNov 6, 2014

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
french_national_commission_on_informatics_and_liberty cookievizv ≤ 1.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.