A vulnerability was found in NoxxieNl Criminals. It has been classified as critical. Affected is an unknown function of the file ingame/roulette.php. The manipulation of the argument gambleMoney leads to sql injection. The name of the patch is 0a60b31271d4cbf8babe4be993d2a3a1617f0897. It is recommended to apply a patch to fix this issue. VDB-218022 is the identifier assigned to this vulnerability.
References
Link | Resource |
---|---|
https://vuldb.com/?ctiid.218022 | Permissions Required Third Party Advisory |
https://vuldb.com/?id.218022 | Permissions Required Third Party Advisory |
https://github.com/NoxxieNl/Criminals/commit/0a60b31271d4cbf8babe4be993d2a3a1617f0897 | Patch Third Party Advisory |
Configurations
Information
Published : 2023-01-11 11:15
Updated : 2023-01-18 10:33
NVD link : CVE-2014-125076
Mitre link : CVE-2014-125076
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
criminals_project
- criminals