CVE-2014-4333

Published: Jun 19, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the members[] parameter, related to CVE-2014-3810.

Affected (18)

Products: Boonex: Dolphin

Boonex

1 product

Dolphin

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Boonex Dolphin	Up to 7.1.4
Boonex Dolphin	Version 7.0.0
Boonex Dolphin	Version 7.0.1
Boonex Dolphin	Version 7.0.2
Boonex Dolphin	Version 7.0.3
Boonex Dolphin	Version 7.0.3 beta
Boonex Dolphin	Version 7.0.4
Boonex Dolphin	Version 7.0.5
Boonex Dolphin	Version 7.0.6
Boonex Dolphin	Version 7.0.7
Boonex Dolphin	Version 7.0.8
Boonex Dolphin	Version 7.0.9
Boonex Dolphin	Version 7.1.0
Boonex Dolphin	Version 7.1.0 b1
Boonex Dolphin	Version 7.1.0 b2
Boonex Dolphin	Version 7.1.1
Boonex Dolphin	Version 7.1.2
Boonex Dolphin	Version 7.1.3