CVE-2014-100012

High

Published: 13/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The Sendy application version 1.1.8.4 has an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the i parameter.

Risk Assessment

This vulnerability may lead to unauthorized access to the database, potentially resulting in the disclosure of sensitive information or data modification.

Recommendation

It is recommended to update the Sendy application to the latest version to mitigate this vulnerability and implement SQL injection prevention measures.

Other vulnerabilities in Sendy 1.1.8.4

CVE-2014-100011High
CVE-2014-100011 describes an SQL injection vulnerability in the /send-to module in Sendy 1.1.9.1 that allows remote attackers to execute arbitrary SQL commands via the c parameter.

Original NVD description (English source)

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter.