CVE-2014-125085 - Gimmie Plugin trigger_ratethread.php sql injection

Back Back to CVE browser

CRITICAL

Gimmie Plugin trigger_ratethread.php sql injection

Published Feb 5, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.62%

Description

A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the file trigger_ratethread.php. The manipulation of the argument t/postusername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. The patch is identified as f11a136e9cbd24997354965178728dc22a2aa2ed. It is recommended to upgrade the affected component. VDB-220206 is the identifier assigned to this vulnerability.

Affected products

Vendor n/a Product Gimmie Plugin Default
n/a
- Version
  1.2.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Gimmie Plugin

n/a

Version	Status	Constraints
1.2.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-1254
Advisory
https://github.com/gimmie/vbulletin-v4/commit/f11a136e9cbd24997354965178728dc22a2aa2ed
patchThird Party Advisory
https://github.com/gimmie/vbulletin-v4/tree/v1.3.0
patchRelease NotesThird Party Advisory
https://vuldb.com/?ctiid.220206
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.220206
vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-1254		Advisory
https://github.com/gimmie/vbulletin-v4/commit/f11a136e9cbd24997354965178728dc22a2aa2ed		patchThird Party Advisory
https://github.com/gimmie/vbulletin-v4/tree/v1.3.0		patchRelease NotesThird Party Advisory
https://vuldb.com/?ctiid.220206		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.220206		vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory