CVE-2014-9347

High

Published: 08/12/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

CVE-2014-9347 is an SQL injection vulnerability in dosearch.php in phpMyRecipes version 1.2.2 that allows remote attackers to execute arbitrary SQL commands via the words_exact parameter.

Risk Assessment

An attacker could exploit this vulnerability to manipulate the database, potentially leading to data disclosure or modification, posing a serious security threat to the application.

Recommendation

It is recommended to update phpMyRecipes to the latest version that addresses this vulnerability and to implement additional security measures such as input validation and sanitization.

Other vulnerabilities in phpMyRecipes 1.2.2

CVE-2014-9440High
CVE-2014-9440 is an SQL injection vulnerability in browse.php in phpMyRecipes version 1.2.2 that allows remote attackers to execute arbitrary SQL commands via the category parameter.

Original NVD description (English source)

SQL injection vulnerability in dosearch.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the words_exact parameter.