CVE-2014-4034

High

Published: 11/06/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

CVE-2014-4034 is an SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 that allows remote attackers to execute arbitrary SQL commands via the article_id parameter.

Risk Assessment

Attackers can exploit this vulnerability to gain access to sensitive data in the database, potentially leading to serious security breaches.

Recommendation

It is recommended to update to the latest version of ZeroCMS and implement input filtering and validation to minimize the risk of SQL injection attacks.

Other vulnerabilities in ZeroCMS 1.0

CVE-2014-4194High
ZeroCMS 1.0 has an SQL injection vulnerability in zero_transact_article.php that allows remote attackers to execute arbitrary SQL commands via the article_id parameter in a Submit Comment action.

Original NVD description (English source)

SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter.