CVE-2014-1645

CWE-89 — SQL Injection4 documents4 sources
Severity
7.5HIGH
EPSS
0.5%
top 34.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Liveupdate Administrator
Timeline
PublishedMar 29
Latest updateMay 17

Description

SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: www.symantec.com ↗Patch: www.symantec.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g2j5-j7p5-p54p: SQL injection vulnerability in forcepasswd↗2022-05-17
▶
CVEList
CVE-2014-1645: SQL injection vulnerability in forcepasswd↗2014-03-29
▶
CVE-2014-1645 (HIGH CVSS 7.5) | SQL injection vulnerability in forc | cvebase.io