CVE-2014-125116 is a critical remote code execution vulnerability affecting HybridAuth versions 2.0.9 through 2.2.2. The flaw stems from the insecure use of the install.php script, which remains accessible post-deployment and fails to sanitize user input. This allows an unauthenticated attacker to inject arbitrary PHP code into the application's configuration file, leading to immediate remote code execution upon file loading. With a CVSS score of 9.3 (CRITICAL) and an EPSS score indicating high exploitability, this vulnerability poses a significant risk. Exploit modules are publicly available in Metasploit, and the vulnerability has garnered considerable community discussion, although it is not currently listed as actively exploited in CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| HybridAuth | HybridAuth | >= 2.0.9, <= 2.2.2CNA affecteddefault unaffected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.