CVE-2014-7871

State: Published
Severity: Not scored
Published: Nov 21, 2014
Updated: Aug 6, 2024
Reserved: Oct 6, 2014

Description

SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote authenticated users to execute arbitrary SQL commands via a crafted jslob API call.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://packetstormsecurity.com/files/129020/OX-App-Suite-7.6.0-SQL-Injection.html
70982vdb-entry
20141107 Open-Xchange Security Advisory 2014-11-07mailing-list
oxappsuite-cve20147871-sql-injection(98563)vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.