CVE-2014-125081: risheesh debutsav sql injection

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-17 · updated 2026-06-17
Weakness: CWE-89

Description

A vulnerability, which was classified as critical, has been found in risheesh debutsav. This issue affects some unknown processing. The manipulation leads to sql injection. The patch is named 7a8430df79277c613449262201cc792db894fc76. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218459.

Affected products

risheesh debutsav: before 2014-10-05 — fixed in 2014-10-05

How to fix

Upgrade to a fixed version: risheesh debutsav 2014-10-05. Check the vendor advisory for mitigations.

References

https://github.com/risheesh/debutsav/commit/7a8430df79277c613449262201cc792db894fc76
https://vuldb.com/?ctiid.218459
https://vuldb.com/?id.218459
https://github.com/risheesh/debutsav/commit/7a8430df79277c613449262201cc792db894fc76
https://vuldb.com/?ctiid.218459
https://vuldb.com/?id.218459

Get alerted when CVE-2014-125081 or the next vulnerability affects your stack