Miggo Logo
Miggo Vulnerability Database
→
CVE-2014-125029

CVE-2014-125029: PaginationServiceProvider SQL Injection vulnerability

9.8

CVSS Score
3.1

Basic Information

CVE ID
CVE-2014-125029
GHSA ID
GHSA-ww43-mcvh-35p4
EPSS Score
0.17783%
CWE
CWE-89
Published
1/8/2023
Updated
10/20/2023
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
ttskch/pagination-service-providercomposer< 1.0.01.0.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability arises in the SQL query construction in demo/index.php. User-controlled input (sort/id parameter) is directly interpolated into the SQL string via $request->get('sort', 'id') and used in the ORDER BY clause. The fetchAll method then executes this raw, unsanitized query. The patch fixes this by using quoteIdentifier on $sort and validating $direction, confirming the lack of input sanitization in the original code. While the root cause is the unsafe interpolation, fetchAll is the function that ultimately executes the vulnerable SQL, making it the critical point of exploitation.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

* vuln*r**ility w*s *oun* in ttsk** P**in*tionS*rvi**Provi**r up to *.x. It **s ***n ***l*r** *s *riti**l. T*is vuln*r**ility *****ts unknown *o** o* t** *il* `**mo/in**x.p*p` o* t** *ompon*nt **mo. T** m*nipul*tion o* t** *r*um*nt sort/i* l***s to s

Reasoning

T** vuln*r**ility *ris*s in t** SQL qu*ry *onstru*tion in `**mo/in**x.p*p`. Us*r-*ontroll** input (sort/i* p*r*m*t*r) is *ir**tly int*rpol*t** into t** SQL strin* vi* `$r*qu*st->**t('sort', 'i*')` *n* us** in t** OR**R *Y *l*us*. T** `**t***ll` m*t*o