CVE-2014-4333
Published Jun 19, 2014
Last updated 6 years ago
Overview
- Description
- Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the members[] parameter, related to CVE-2014-3810.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-352
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:boonex:dolphin:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BAA3ECA-B3B8-4CA0-ACF7-769138C13084",
"versionEndIncluding": "7.1.4"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "023291BF-B0C8-4F97-BEF9-6236E0BFE586"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED896BE8-C2D4-44EB-B25D-2813AC3D4712"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FBE05BF-CDBB-4127-B1BA-93015ED3D1BD"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FA695EF-EB38-46D7-B3E4-98BD6CE8BDC0"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.3:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87224EF7-3162-4315-8083-82C9E42FC146"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCD76476-3DF3-4210-B3DA-5161A8CA2F4D"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "745F34FA-FA44-4653-9C81-4784D5EDD9E0"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F0CFADC-E2A0-4DC8-A1AF-FDC66FFC5254"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13DA79AD-A38C-43BE-A4FE-647A5AF0A95F"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C68C0A57-F526-4CB4-8CDD-5A0F06898453"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB71FEEB-F1A7-4323-9EFE-50001DEAC22F"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9743D927-D0E5-4C33-BDFB-E08C9BE7CB39"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.1.0:b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B316EA83-87F4-4EBC-A3B5-1024E9D3E272"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.1.0:b2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF1C4FC5-7609-4964-816B-E6C1F45CA953"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "011D59F0-E84C-459B-83CF-6EA00B42C957"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E0DC2BC-BD69-44C6-8422-71FBC45C484C"
},
{
"criteria": "cpe:2.3:a:boonex:dolphin:7.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26310CFF-A9CE-4C87-9D29-CC7CCA0BF064"
}
],
"operator": "OR"
}
]
}
]