CVE-2014-9440

High

Published: 02/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

CVE-2014-9440 is an SQL injection vulnerability in browse.php in phpMyRecipes version 1.2.2 that allows remote attackers to execute arbitrary SQL commands via the category parameter.

Risk Assessment

Attackers can exploit this vulnerability to gain access to sensitive data in the database, potentially leading to serious security breaches.

Recommendation

It is recommended to update phpMyRecipes to the latest version to eliminate this vulnerability and implement appropriate security measures against SQL injection attacks.

Other vulnerabilities in phpMyRecipes 1.2.2

CVE-2014-9347High
CVE-2014-9347 is an SQL injection vulnerability in dosearch.php in phpMyRecipes version 1.2.2 that allows remote attackers to execute arbitrary SQL commands via the words_exact parameter.

Original NVD description (English source)

SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the category parameter.