CVE-2014-8351
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty ...
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.
- Record
CVE-2014-8351- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.
- Record
CVE-2014-8351- Updated
- 2026-11-02
EUVDEUVD-2014-8188 No score
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.
- Record
EUVD-2014-8188- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vq3j-8p96-xmcq No score
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty ...
SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.
- Record
GHSA-vq3j-8p96-xmcq- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-8351 is a high vulnerability (CVSS 7.5) in French National Commission On Informatics And Liberty Cookieviz, published November 6, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.66%, the 76th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/98454
github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2
seclists.org/fulldisclosure/2014/Nov/3
packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
nvd.nist.gov/vuln/detail/CVE-2014-8351