CVE-2014-7176

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobal_txt parameter to plugins/docman.

• CWE-89

• http://packetstormsecurity.com/files/128875/Tuleap-7.4.99.5-Blind-SQL-Injection.htmlExploit
• http://seclists.org/fulldisclosure/2014/Oct/119Exploit
• http://www.exploit-db.com/exploits/35098Exploit
• http://www.securityfocus.com/bid/70773Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98307
• https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7176/Exploit
• https://www.tuleap.org/recent-vulnerabilitiesVendor Advisory
• http://packetstormsecurity.com/files/128875/Tuleap-7.4.99.5-Blind-SQL-Injection.htmlExploit
• http://seclists.org/fulldisclosure/2014/Oct/119Exploit
• http://www.exploit-db.com/exploits/35098Exploit
• http://www.securityfocus.com/bid/70773Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98307
• https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7176/Exploit
• https://www.tuleap.org/recent-vulnerabilitiesVendor Advisory

Published

Nov 4, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7158Cross-site request forgery (CSRF) vulnerability in Exinda WA…
• CVE-2014-7169GNU Bash through 4.3 bash43-025 processes trailing strings a…9.8
• CVE-2014-7170Race condition in Puppet Server 0.2.0 allows local users to …
• CVE-2014-7173FarLinX X25 Gateway through 2014-09-25 allows command inject…9.8
• CVE-2014-7174FarLinX X25 Gateway through 2014-09-25 allows directory trav…5.3
• CVE-2014-7175FarLinX X25 Gateway through 2014-09-25 allows attackers to w…9.8
• CVE-2014-7177XML External Entity vulnerability in Enalean Tuleap 7.2 and …
• CVE-2014-7178Enalean Tuleap before 7.5.99.6 allows remote attackers to ex…
• CVE-2014-7180Electric Cloud ElectricCommander before 4.2.6 and 5.x before…
• CVE-2014-7181Cross-site scripting (XSS) vulnerability in the Max Foundry …
• CVE-2014-7182Multiple cross-site scripting (XSS) vulnerabilities in the W…
• CVE-2014-7183Multiple cross-site scripting (XSS) vulnerabilities in the s…