VULNERABILITY INTELLIGENCE
CVE-2014-9464
CVSS score7.5 HIGH
EPSS probability2.08%
CISA KEVNot currently listed
Published2015-01-03
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute arbitrary SQL commands via the category parameter when displaying a category, related to the $parent_id variable.
Weakness classification
- CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')