CVE-2014-8294: PHP Resource Voice Of Web Allmyguests

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) allmyphp_cookie cookie to admin.php or the (2) Username or (3) Password.

Affected products

• PHP Resource Voice Of Web Allmyguests: version 0.4.1 only

Published 2014-10-15. Last modified 2026-06-17.