Skip to content
OpenAdvisories
Medium · 5.5 CVE-2014-125037 EUVD-2014-1209GHSA-whhc-cv9p-pgmj

License to Kill injury.rb sql injection

Published Jan 2, 2023 · Updated Aug 6, 2024 · Assigned by VulDB

Description

A vulnerability, which was classified as critical, was found in License to Kill. This affects an unknown part of the file models/injury.rb. The manipulation of the argument name leads to sql injection. The patch is named cd11cf174f361c98e9b1b4c281aa7b77f46b5078. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217191.

Affected products

VendorProductAffectedFixed
— License to Kill — —

References