[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCKoDv9ulEYTL4puFhxiIiZ3vcTWE8iOdo7Wml2-oZi0":3,"g5a-risk:CVE-2014-10033":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":38,"references":39,"referencesCount":71,"weaknesses":72,"weaknessesCount":38,"isActivelyExploited":81,"cisaInfo":15,"otxData":15,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":117,"notableEvents":118},"CVE-2014-10033","What is CVE-2014-10033?","SQL injection vulnerability in the update_zone function in catalog\u002Fadmin\u002Fgeo_zones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action.","SQL injection vulnerability in the update_zone function in catalog\u002Fadmin\u002Fgeo_zones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote admini...","2015-01-13T15:59:42.553","2025-04-12T10:46:40.837",6.5,"AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","SINGLE","PARTIAL","MEDIUM",8,6.4,0.01798,[29,29,29,29,29,29,29],"Medium",[33],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"oscommerce","online_merchant","*","cpe:2.3:a:oscommerce:online_merchant:*:*:*:*:*:*:*:*",1,[40,44,49,53,57,61,63,65,67,69],{"url":41,"source":42,"tags":43},"http:\u002F\u002Fosvdb.org\u002Fshow\u002Fosvdb\u002F103365","Osvdb",[],{"url":45,"source":46,"tags":47},"http:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F31515","Exploit-db",[48],"Exploit",{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.secgeek.net\u002Foscommerce-v2x-sql-injection-vulnerability\u002F","Secgeek",[48],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F91113","Ibmcloud",[],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fgithub.com\u002Fgburton\u002Foscommerce2\u002Fcommit\u002Fe4d90eccd7d9072ebe78da4c38fb048bfe31c902","GitHub",[],{"url":41,"source":42,"tags":62},[],{"url":45,"source":46,"tags":64},[48],{"url":50,"source":51,"tags":66},[48],{"url":54,"source":55,"tags":68},[],{"url":58,"source":59,"tags":70},[],10,[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",false,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2014-10033? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-10033, a medium severity cyber security vulnerability from 2015. SQL injection vulnerability in the update_zone function i...","CVE-2014-10033, CVE-2014-10033 vulnerability, CVE-2014-10033 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, oscommerce security, online_merchant vulnerability","\u002Fwhat-is\u002Fcve-2014-10033",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-10033","Cybersecurity","CVE-2014-10033, CVE-2014-10033 vulnerability, CVE-2014-10033 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":15,"Negate":15,"Nodes":110},[111],{"Operator":112,"Negate":15,"CPEMatch":113},"OR",[114],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":115,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":116},"44B4EA20-95CC-41F9-9AE5-54BA56413F4E","2.3.3.4",[],[],{"lastModified":11,"cacheTime":120,"version":21},1792370353922,{"score":122,"band":31,"action":123,"scoredAt":124},46,"Plan remediation","2026-10-17T07:35:52.451606+00:00"]