CVE-2014-125076: NoxxieNl Criminals roulette.php sql injection

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-11 · updated 2026-06-17
Weakness: CWE-89

Description

A vulnerability was found in NoxxieNl Criminals. It has been classified as critical. Affected is an unknown function of the file ingame/roulette.php. The manipulation of the argument gambleMoney leads to sql injection. The patch is identified as 0a60b31271d4cbf8babe4be993d2a3a1617f0897. It is recommended to apply a patch to fix this issue. VDB-218022 is the identifier assigned to this vulnerability.

Affected products

NoxxieNl Criminals: all versions

References

https://github.com/NoxxieNl/Criminals/commit/0a60b31271d4cbf8babe4be993d2a3a1617f0897
https://vuldb.com/?ctiid.218022
https://vuldb.com/?id.218022
https://github.com/NoxxieNl/Criminals/commit/0a60b31271d4cbf8babe4be993d2a3a1617f0897
https://vuldb.com/?ctiid.218022
https://vuldb.com/?id.218022

Get alerted when CVE-2014-125076 or the next vulnerability affects your stack