What’s Vulnerable › Vulnerabilities

CVE-2014-125046: Seiji42 cub-scout-tracker databaseAccessFunctions.js sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-06 · updated 2026-06-17
• Weakness: CWE-89

Description

A vulnerability, which was classified as critical, was found in Seiji42 cub-scout-tracker. This affects an unknown part of the file databaseAccessFunctions.js. The manipulation leads to sql injection. The patch is named b4bc1a328b1f59437db159f9d136d9ed15707e31. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217551.

Affected products

• Seiji42 cub-scout-tracker: before 9-14-2014 — fixed in 9-14-2014

How to fix

Upgrade to a fixed version: Seiji42 cub-scout-tracker 9-14-2014. Check the vendor advisory for mitigations.

References

• https://github.com/Seiji42/cub-scout-tracker/commit/b4bc1a328b1f59437db159f9d136d9ed15707e31
• https://vuldb.com/?ctiid.217551
• https://vuldb.com/?id.217551
• https://github.com/Seiji42/cub-scout-tracker/commit/b4bc1a328b1f59437db159f9d136d9ed15707e31
• https://vuldb.com/?ctiid.217551
• https://vuldb.com/?id.217551

Get alerted when CVE-2014-125046 or the next vulnerability affects your stack