What’s Vulnerable › Vulnerabilities

CVE-2014-125063: ada-l0velace Bid sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-07 · updated 2026-06-17
• Weakness: CWE-89

Description

A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is abd71140b8219fa8741d0d8a57ab27d5bfd34222. It is recommended to apply a patch to fix this issue. The identifier VDB-217625 was assigned to this vulnerability.

Affected products

• ada-l0velace Bid: before 2014-12-03 — fixed in 2014-12-03

How to fix

Upgrade to a fixed version: ada-l0velace Bid 2014-12-03. Check the vendor advisory for mitigations.

References

• https://github.com/ada-l0velace/Bid/commit/abd71140b8219fa8741d0d8a57ab27d5bfd34222
• https://vuldb.com/?ctiid.217625
• https://vuldb.com/?id.217625
• https://github.com/ada-l0velace/Bid/commit/abd71140b8219fa8741d0d8a57ab27d5bfd34222
• https://vuldb.com/?ctiid.217625
• https://vuldb.com/?id.217625

Get alerted when CVE-2014-125063 or the next vulnerability affects your stack