Unrated severityNVD Advisory· Published Nov 6, 2014· Updated Jun 17, 2026

CVE-2014-8351

Description

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

French National Commission On Informatics And Liberty/Cookievizreferences3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:french_national_commission_on_informatics_and_liberty:cookieviz:*:*:*:*:*:*:*:*range: <=1.0
- (no CPE)range: <1.0.1

Patches

Vulnerability mechanics

References

github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2nvdPatch
packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.htmlnvdExploit
seclists.org/fulldisclosure/2014/Nov/3nvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/98454nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000