CVE-2014-4305

Multiple SQL injection vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:nice:recording_express:*:*:*:*:*:*:*:*
cpe:2.3:a:nice:recording_express:6.3.5:*:*:*:*:*:*:*

History

21 Nov 2024, 02:09

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/126858/NICE-Recording-eXpress-6.x-Root-Backdoor-XSS-Bypass.html - () http://packetstormsecurity.com/files/126858/NICE-Recording-eXpress-6.x-Root-Backdoor-XSS-Bypass.html -
References () https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140528-0_NICE_Recording_eXpress_Multiple_critical_vulnerabilities_v10.txt - () https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140528-0_NICE_Recording_eXpress_Multiple_critical_vulnerabilities_v10.txt -

Information

Published : 2014-06-18 14:55

Updated : 2024-11-21 02:09


NVD link : CVE-2014-4305

Mitre link : CVE-2014-4305

CVE.ORG link : CVE-2014-4305


JSON object : View

Products Affected

nice

  • recording_express
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')