CVE-2014-8295: SQL Injection
Published Oct 15, 2014
·Updated
SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter.
Affected Software
1 affected component
Bacula Bacula-Web=5.2.10
Event History
Oct 15, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8295?
CVE-2014-8295 is considered to be a high severity vulnerability due to its potential for remote SQL command execution.
2
How do I fix CVE-2014-8295?
To mitigate CVE-2014-8295, upgrade Bacula-Web to version 5.2.11 or later, where the vulnerability has been addressed.
3
Who is affected by CVE-2014-8295?
CVE-2014-8295 affects users of Bacula-Web version 5.2.10.
4
What type of vulnerability is CVE-2014-8295?
CVE-2014-8295 is a SQL injection vulnerability found in the joblogs.php script of Bacula-Web.
5
What can an attacker do with CVE-2014-8295?
An attacker exploiting CVE-2014-8295 can execute arbitrary SQL commands on the database through the jobid parameter.