CVE-2014-2351CWE-89

CVE-2014-2351: vulnerability in CSWorks

CSWorks SQL Injection

Published · Updated

Follow this CVE+ Monitor CSWorks

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 2.4%
SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests.
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
CSWorks · CSWorks