CVE-2014-4034

SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter.

• CWE-89

• http://packetstormsecurity.com/files/127005/ZeroCMS-1.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/130192/ZeroCMS-1.3.3-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2015/Feb/4Mailing List, Third Party Advisory
• http://seclists.org/oss-sec/2015/q1/379Mailing List, Third Party Advisory
• http://seclists.org/oss-sec/2015/q1/380Mailing List, Third Party Advisory
• http://secunia.com/advisories/59182
• http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-14.htmlNot Applicable
• http://sroesemann.blogspot.de/2015/01/sroeadv-2015-13.htmlNot Applicable
• http://sroesemann.blogspot.de/2015/02/addition-for-advisory-sroeadv-2015-14.htmlNot Applicable
• http://www.exploit-db.com/exploits/33702Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/67953Not Applicable, VDB Entry
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5186.phpExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100588
• http://packetstormsecurity.com/files/127005/ZeroCMS-1.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/130192/ZeroCMS-1.3.3-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2015/Feb/4Mailing List, Third Party Advisory
• http://seclists.org/oss-sec/2015/q1/379Mailing List, Third Party Advisory
• http://seclists.org/oss-sec/2015/q1/380Mailing List, Third Party Advisory
• http://secunia.com/advisories/59182
• http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-14.htmlNot Applicable
• http://sroesemann.blogspot.de/2015/01/sroeadv-2015-13.htmlNot Applicable
• http://sroesemann.blogspot.de/2015/02/addition-for-advisory-sroeadv-2015-14.htmlNot Applicable
• http://www.exploit-db.com/exploits/33702Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/67953Not Applicable, VDB Entry
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5186.phpExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100588

Published

Jun 11, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4024SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 …5.9
• CVE-2014-4027The rd_build_device_space function in drivers/target/target_…
• CVE-2014-4030Cross-site request forgery (CSRF) vulnerability in the JW Pl…
• CVE-2014-4031The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6…
• CVE-2014-4032Cross-site scripting (XSS) vulnerability in apps/app_comment…
• CVE-2014-4033Cross-site scripting (XSS) vulnerability in libraries/includ…
• CVE-2014-4035Cross-site scripting (XSS) vulnerability in booking_details.…
• CVE-2014-4036Cross-site scripting (XSS) vulnerability in modules/system/a…
• CVE-2014-4037Cross-site scripting (XSS) vulnerability in editor/dialog/fc…
• CVE-2014-4038ppc64-diag 2.6.1 allows local users to overwrite arbitrary f…
• CVE-2014-4039ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap a…
• CVE-2014-4040snap in powerpc-utils 1.2.20 produces an archive with fstab …