CVE-2014-8295
NONE EPSS 81.6%
Published Oct 15, 201411y ago · Modified Jun 17, 20262w ago
Published Oct 15, 2014 11y ago
Last Modified Jun 17, 2026 2w ago
Description
SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter.
Threat Intelligence
EPSS Exploit Probability
81.6% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-89 SQL Injection Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| bacula | bacula-web | 5.2.10 | any |
References 3
- osvdb.org http://osvdb.org/show/osvdb/112418
- packetstormsecurity.com http://packetstormsecurity.com/files/128480/Bacula-web-5.2.10-SQL-Injection.html
- exploit-db.com http://www.exploit-db.com/exploits/34851
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.