[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCKoDv9ulEYTL4puFhxiIiZ3vcTWE8iOdo7Wml2-oZi0":3,"g5a-risk:CVE-2014-10033":124},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":76,"weaknesses":77,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":120,"notableEvents":121},"CVE-2014-10033","What is CVE-2014-10033?","SQL injection vulnerability in the update_zone function in catalog\u002Fadmin\u002Fgeo_zones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action.","SQL injection vulnerability in the update_zone function in catalog\u002Fadmin\u002Fgeo_zones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote admini...","2015-01-13T15:59:42.553","2026-06-17T00:04:07.46",6.5,"AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","SINGLE","PARTIAL","",null,"MEDIUM",8,6.4,false,[],0.01798,[34,34,34,34,34,34,34],"Medium",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"oscommerce","online_merchant","*","cpe:2.3:a:oscommerce:online_merchant:*:*:*:*:*:*:*:*",1,[45,49,54,58,62,66,68,70,72,74],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fosvdb.org\u002Fshow\u002Fosvdb\u002F103365","Osvdb",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F31515","Exploit-db",[53],"Exploit",{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.secgeek.net\u002Foscommerce-v2x-sql-injection-vulnerability\u002F","Secgeek",[53],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F91113","Ibmcloud",[],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fgithub.com\u002Fgburton\u002Foscommerce2\u002Fcommit\u002Fe4d90eccd7d9072ebe78da4c38fb048bfe31c902","GitHub",[],{"url":46,"source":47,"tags":67},[],{"url":50,"source":51,"tags":69},[53],{"url":55,"source":56,"tags":71},[53],{"url":59,"source":60,"tags":73},[],{"url":63,"source":64,"tags":75},[],10,[78],{"id":79,"name":80,"description":81,"extendedDescription":27,"status":82,"abstraction":83,"structure":84},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","Stable","Base","Simple",[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2014-10033? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2014-10033, a medium severity cyber security vulnerability from 2015. SQL injection vulnerability in the update_zone function i...","CVE-2014-10033, CVE-2014-10033 vulnerability, CVE-2014-10033 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, oscommerce security, online_merchant vulnerability","\u002Fwhat-is\u002Fcve-2014-10033",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2014-10033","Cybersecurity","CVE-2014-10033, CVE-2014-10033 vulnerability, CVE-2014-10033 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112],{"Operator":28,"Negate":28,"Nodes":113},[114],{"Operator":115,"Negate":32,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":118,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":119},"44B4EA20-95CC-41F9-9AE5-54BA56413F4E","2.3.3.4",[],[],{"lastModified":11,"cacheTime":123,"version":22},1793220760322,{"score":125,"band":36,"action":126,"scoredAt":127},46,"Plan remediation","2026-07-01T10:19:20.543615+00:00"]