CVE-2017-14145

Critical

Published: 05/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

HelpDEZk version 1.1.1 has an SQL Injection vulnerability in the loginController.php file, occurring in the selectWarning function. This issue is related to the admin/login/getWarningInfo/id/ PATH_INFO.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, potentially resulting in the disclosure of sensitive information or data manipulation.

Recommendation

It is recommended to update HelpDEZk to the latest version to eliminate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, related to the selectWarning function.