Lucene search
China National Vulnerability DatabaseCNVD-2021-101547HistoryOct 09, 2021 - 12:00 a.m.
OpenSNS SQL Blind Injection Vulnerability (CNVD-2021-101547)
2021-10-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
0.002 Low
EPSS
Percentile
58.6%
OpenSNS is a comprehensive social networking software developed by Thinking Sky Technology. pid parameter in /Controller/ChinaCityController.class.php in OpenSNS version 6.1.0 is vulnerable to SQL blind injection. An attacker can use this vulnerability to obtain sensitive database information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| opensns opensns | eq | 6.1.0 |
Related
prion
prion
Sql injection
2021-10-07 22:15:00
nvd
nvd
CVE-2020-21725
2021-10-07 22:15:07
cvelist
cvelist
CVE-2020-21725
2021-10-07 21:28:02
cve
cve
CVE-2020-21725
2021-10-07 22:15:07
checkpoint_advisories
checkpoint_advisories
OpenSNS SQL Injection (CVE-2020-21725; CVE-2020-21726)
2021-11-24 00:00:00