Skip to content

CVE-2014-125083 Anant Labs google-enterprise-connector-dctm sql injection

CriticalCVSS 9.8 EPSS 0.68%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/domain leads to sql injection. The patch is named 6fba04f18ab7764002a1da308e7cd9712b501cb7. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218911.

Affected products

ProductAffected versionsFixed in
anant google-enterprise-connector-dctm <= 3.2.3 No fix listed
Anant Labs google-enterprise-connector-dctm = 3.2.0 No fix listed
Anant Labs google-enterprise-connector-dctm = 3.2.1 No fix listed
Anant Labs google-enterprise-connector-dctm = 3.2.2 No fix listed
Anant Labs google-enterprise-connector-dctm = 3.2.3 No fix listed

References

  • github.com patch
  • vuldb.com permissions-required signature third-party-advisory
  • vuldb.com technical-description third-party-advisory vdb-entry