What’s Vulnerable › Vulnerabilities

CVE-2014-8351

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-11-06 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.

Affected products

• French National Commission On Informatics And Liberty Cookieviz: through 1.0

References

• http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
• http://seclists.org/fulldisclosure/2014/Nov/3
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98454
• https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2
• http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
• http://seclists.org/fulldisclosure/2014/Nov/3
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98454
• https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2

Get alerted when CVE-2014-8351 or the next vulnerability affects your stack