What’s Vulnerable › Vulnerabilities

CVE-2014-125049: typcn Blogile server.js getNav sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-06 · updated 2026-06-17
• Weakness: CWE-89

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in typcn Blogile. Affected is the function getNav of the file server.js. The manipulation of the argument query leads to sql injection. The name of the patch is cfec31043b562ffefe29fe01af6d3c5ed1bf8f7d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217560. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

• typcn Blogile: before 2014-12-02 — fixed in 2014-12-02

How to fix

Upgrade to a fixed version: typcn Blogile 2014-12-02. Check the vendor advisory for mitigations.

References

• https://github.com/typcn/Blogile/commit/cfec31043b562ffefe29fe01af6d3c5ed1bf8f7d
• https://vuldb.com/?ctiid.217560
• https://vuldb.com/?id.217560
• https://github.com/typcn/Blogile/commit/cfec31043b562ffefe29fe01af6d3c5ed1bf8f7d
• https://vuldb.com/?ctiid.217560
• https://vuldb.com/?id.217560

Get alerted when CVE-2014-125049 or the next vulnerability affects your stack