MidnightBSD

Advisories for phpmyrecipes_project

CVE-2014-9347 HIGH

SQL injection vulnerability in dosearch.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the words_exact parameter.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor Product Version
phpmyrecipes_project phpmyrecipes 1.2.2
CVE-2014-9440 HIGH

SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the category parameter.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor Product Version
phpmyrecipes_project phpmyrecipes 1.2.2