CVE-2014-9558
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Smartwebsites SmartCMS是塞浦路斯Smartwebsites公司的一套内容管理系统（CMS）。该系统提供在线内容管理、用户管理和文件管理等功能。 Smartwebsites SmartCMS 2版本中存在SQL注入漏洞，该漏洞源于程序使用SQL查询语句之前，没有过滤用户提交的输入。远程攻击者可利用该漏洞控制应用程序，访问或修改数据，或利用底层数据库中潜在的漏洞。
Public Exploits 1
ExploitDB · 1
EDB-12507 [webapps]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2014-9558
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple SQL injection vulnerabilities in SmartCMS v.2.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Smartwebsites SmartCMS SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Smartwebsites SmartCMS是塞浦路斯Smartwebsites公司的一套内容管理系统（CMS）。该系统提供在线内容管理、用户管理和文件管理等功能。 Smartwebsites SmartCMS 2版本中存在SQL注入漏洞，该漏洞源于程序使用SQL查询语句之前，没有过滤用户提交的输入。远程攻击者可利用该漏洞控制应用程序，访问或修改数据，或利用底层数据库中潜在的漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2014-9558
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-9558
请登录查看更多情报信息。
Vendor Advisories for CVE-2014-9558 (1)
Exploits & Public PoCs for CVE-2014-9558 (1)
Mailing List Discussions for CVE-2014-9558 (1)
Same Patch Batch · n/a · 2017-08-28 · 73 CVEs total
| CVE-2014-8871 | Hybris Commerce Software Suite 路径遍历漏洞 | |
| CVE-2015-1876 | ES File Explorer 路径遍历漏洞 | |
| CVE-2015-1443 | fli4l 安全漏洞 | |
| CVE-2014-9557 | Smartwebsites SmartCMS 跨站脚本漏洞 | |
| CVE-2014-9514 | BMC Footprints Service Core 跨站脚本漏洞 | |
| CVE-2014-9513 | xbindkeys-config 安全漏洞 | |
| CVE-2014-9483 | Emacs 安全漏洞 | |
| CVE-2014-9469 | vBulletin 跨站脚本漏洞 | |
| CVE-2014-9312 | WordPress Photo Gallery 安全漏洞 | |
| CVE-2014-8900 | IBM UrbanCode Release 跨站请求伪造漏洞 | |
| CVE-2015-0101 | IBM Business Process Manager Process Center 跨站脚本漏洞 | |
| CVE-2014-8753 | Cit-e-Net Cit-e-Access 跨站脚本漏洞 | |
| CVE-2014-8428 | Barracuda Load Balancer 权限许可和访问控制漏洞 | |
| CVE-2014-8426 | Barracuda Load Balancer 安全漏洞 | |
| CVE-2014-8168 | Red Hat Satellite 安全漏洞 | |
| CVE-2014-5302 | 多款ZOHO产品路径遍历漏洞 | |
| CVE-2014-5301 | 多款ZOHO产品路径遍历漏洞 | |
| CVE-2014-4925 | Docutek Solutions Good for Enterprise for Android 跨站脚本漏洞 | |
| CVE-2014-0141 | Red Hat Satellite 跨站脚本漏洞 | |
| CVE-2013-0870 | FFmpeg 安全漏洞 |
Showing top 20 of 73 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2014-9558
No comments yet