CVE-2014-3810

SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the members[] parameter. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-4333.

• CWE-89

• http://packetstormsecurity.com/files/127148/Dolphin-7.1.4-SQL-Injection.htmlExploit
• http://www.boonex.com/forums/topic/Medium-Risk-Security-Vulnerability-in-Dolphin-7-1.htmExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/532468/100/0/threaded
• http://www.securityfocus.com/bid/68091
• https://www.htbridge.com/advisory/HTB23216Exploit
• http://packetstormsecurity.com/files/127148/Dolphin-7.1.4-SQL-Injection.htmlExploit
• http://www.boonex.com/forums/topic/Medium-Risk-Security-Vulnerability-in-Dolphin-7-1.htmExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/532468/100/0/threaded
• http://www.securityfocus.com/bid/68091
• https://www.htbridge.com/advisory/HTB23216Exploit

Published

Jun 19, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3804The av-centerd SOAP service in AlienVault OSSIM before 4.7.0…
• CVE-2014-3805The av-centerd SOAP service in AlienVault OSSIM before 4.7.0…
• CVE-2014-3806Directory traversal vulnerability in cgi-bin/help/doIt.cgi i…
• CVE-2014-3807Multiple cross-site scripting (XSS) vulnerabilities in Barra…
• CVE-2014-3808Multiple cross-site scripting (XSS) vulnerabilities in Barra…
• CVE-2014-3809Cross-site scripting (XSS) vulnerability in the management i…6.1
• CVE-2014-3811Juniper Installer Service (JIS) Client 7.x before 7.4R6 for …
• CVE-2014-3812The Juniper Junos Pulse Secure Access Service (SSL VPN) devi…
• CVE-2014-3813Unspecified vulnerability in the Juniper Networks NetScreen …
• CVE-2014-3814The Juniper Networks NetScreen Firewall devices with ScreenO…
• CVE-2014-3815Juniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before …
• CVE-2014-3816Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R11, 12.1…