CVE-2014-8945: OS Command Injection
Published Jun 1, 2020
·Updated
admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields.
Affected Software
1 affected component
piwigo Lexiglot<=2014-11-20
Event History
Jun 1, 2020
CVE Published
via MITRE·04:11 PM
Data Sourced
via MITRE·04:11 PM
Description
Frequently Asked Questions
1
What is CVE-2014-8945?
CVE-2014-8945 is a vulnerability in Lexiglot that allows command injection via the username and password fields.
2
How severe is CVE-2014-8945?
CVE-2014-8945 is classified as critical with a severity score of 9.8.
3
What software is affected by CVE-2014-8945?
Piwigo Lexiglot versions up to and including 2014-11-20 are affected by CVE-2014-8945.
4
How can I fix CVE-2014-8945?
To fix CVE-2014-8945, it is recommended to update Piwigo Lexiglot to a version beyond 2014-11-20.
5
Where can I find more information about CVE-2014-8945?
More information about CVE-2014-8945 can be found at [link].