CVE-2014-8941

Name of the Vulnerable Software and Affected Versions: Lexiglot versions prior to 2014-11-20

Description: The issue allows SQL injection via specific URI parameters. This can be exploited through the "admin.php?page=users&from id=" or "admin.php?page=history&limit=" API endpoints, using the from id and limit variables.

Recommendations: For versions prior to 2014-11-20, consider restricting access to the "admin.php?page=users" and "admin.php?page=history" API endpoints until a fix is available. Avoid using the from id and limit variables in these endpoints to minimize the risk of exploitation.