CVE-2014-125027

A vulnerability has been found in Yuna Scatari TBDev up to 2.1.17 and classified as problematic. Affected by this vulnerability is the function get_user_icons of the file usersearch.php. The manipulation of the argument n/r/r2/em/ip/co/ma/d/d2/ul/ul2/ls/ls2/dl/dl2 leads to cross site scripting. The attack can be launched remotely. Upgrading to version 2.1.18 is able to address this issue. The patch is named 0ba3fd4be29dd48fa4455c236a9403b3149a4fd4. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217147.

• CWE-79

• https://github.com/yunasc/tbdev/commit/0ba3fd4be29dd48fa4455c236a9403b3149a4fd4Patch, Third Party Advisory
• https://github.com/yunasc/tbdev/releases/tag/v2.1.18Release Notes, Third Party Advisory
• https://vuldb.com/?ctiid.217147Permissions Required, Third Party Advisory
• https://vuldb.com/?id.217147Permissions Required, Third Party Advisory
• https://github.com/yunasc/tbdev/commit/0ba3fd4be29dd48fa4455c236a9403b3149a4fd4Patch, Third Party Advisory
• https://github.com/yunasc/tbdev/releases/tag/v2.1.18Release Notes, Third Party Advisory
• https://vuldb.com/?ctiid.217147Permissions Required, Third Party Advisory
• https://vuldb.com/?id.217147Permissions Required, Third Party Advisory

Published

Dec 31, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-125021A vulnerability was found in FFmpeg 2.0 and classified as pr…5.5
• CVE-2014-125022A vulnerability was found in FFmpeg 2.0. It has been classif…5.5
• CVE-2014-125023A vulnerability was found in FFmpeg 2.0. It has been declare…5.5
• CVE-2014-125024A vulnerability was found in FFmpeg 2.0. It has been rated a…7.8
• CVE-2014-125025A vulnerability classified as problematic has been found in …5.5
• CVE-2014-125026LZ4 bindings use a deprecated C API that is vulnerable to me…9.8
• CVE-2014-125028A vulnerability was found in valtech IDP Test Client and cla…8.8
• CVE-2014-125029A vulnerability was found in ttskch PaginationServiceProvide…9.8
• CVE-2014-125030A vulnerability, which was classified as critical, has been …9.8
• CVE-2014-125031A vulnerability was found in kirill2485 TekNet. It has been …6.1
• CVE-2014-125032A vulnerability was found in porpeeranut go-with-me. It has …9.8
• CVE-2014-125033A vulnerability was found in rails-cv-app. It has been rated…7.5