CVE-2014-8294

Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers...

7.5 High

CVE-2014-8294 is a high vulnerability (CVSS 7.5) in Php Resource Voice Of Web Allmyguests, published October 15, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. No source names a fixed version.

Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) allmyphp_cookie cookie to admin.php or the (2) Username or (3) Password.

Exploit likelihood

1.26%Up 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2014-8294
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-8294
Updated: 2026-11-02

EUVDEUVD-2014-8135 No score

Record: EUVD-2014-8135
Updated: 2026-11-03

GitHub AdvisoriesGHSA-28pw-f2p6-x4fr No score

Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers...

Record: GHSA-28pw-f2p6-x4fr
Weakness: CWE-89
Updated: 2026-11-02

Affected products

php resource voice of web allmyguests

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

Exploit likelihood

What each source reports

Affected products

History

References