CVE-2014-125049

CVE-2014-125049 is a critical SQL injection vulnerability in typcn Blogile, specifically within the getNav function of the server.js file, affecting the blogile_project blogile product. This flaw allows an unauthenticated attacker to execute arbitrary SQL commands by manipulating the 'query' argument. With a CVSS score of 9.8 (Critical), it presents a severe risk with high impact on confidentiality, integrity, and availability, requiring no user interaction or complex attack conditions. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, and it is noted as affecting an unsupported product.