What’s Vulnerable › Vulnerabilities

CVE-2013-10014: oktora24 2moons sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-19 · updated 2026-06-16
• Weakness: CWE-89

Description

A vulnerability classified as critical has been found in oktora24 2moons. Affected is an unknown function. The manipulation leads to sql injection. The patch is identified as 1b09cf7672eb85b5b0c8a4de321f7a4ad87b09a7. It is recommended to apply a patch to fix this issue. VDB-218898 is the identifier assigned to this vulnerability.

Affected products

• oktora24 2moons: before 2013-01-18 — fixed in 2013-01-18

How to fix

Upgrade to a fixed version: oktora24 2moons 2013-01-18. Check the vendor advisory for mitigations.

References

• https://github.com/oktora24/2moons/commit/1b09cf7672eb85b5b0c8a4de321f7a4ad87b09a7
• https://vuldb.com/?ctiid.218898
• https://vuldb.com/?id.218898
• https://github.com/oktora24/2moons/commit/1b09cf7672eb85b5b0c8a4de321f7a4ad87b09a7
• https://vuldb.com/?ctiid.218898
• https://vuldb.com/?id.218898

Get alerted when CVE-2013-10014 or the next vulnerability affects your stack