CVE-2014-8339 SQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ch parameter.
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ch parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nuevolab nuevoplayer | All versions | No fix listed |
| clip-share clipshare | <= 8.0 | No fix listed |
References
- packetstormsecurity.com
- 20141029 CVE-2014-8399 SQL Injection in NuevoLabs flash player for clipshare mailing-list
- 70833 vdb-entry
- www.youtube.com exploit
- nuevolabs-sql-injection(98393) vdb-entry