Lucene search
China National Vulnerability DatabaseCNVD-2021-101548HistoryOct 09, 2021 - 12:00 a.m.
OpenSNS SQL Blind Injection Vulnerability
2021-10-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
0.002 Low
EPSS
Percentile
58.6%
OpenSNS is a comprehensive social networking software developed by Thinking Sky Technology. SQL blind vulnerability exists in the cid parameter of /Controller/ChinaCityController.class.php in OpenSNS version 6.1.0. An attacker can use this vulnerability to obtain sensitive database information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| opensns opensns | eq | 6.1.0 |
Related
cve
cve
CVE-2020-21726
2021-10-07 22:15:07
cvelist
cvelist
CVE-2020-21726
2021-10-07 21:28:03
prion
prion
Sql injection
2021-10-07 22:15:00
nvd
nvd
CVE-2020-21726
2021-10-07 22:15:07
checkpoint_advisories
checkpoint_advisories
OpenSNS SQL Injection (CVE-2020-21725; CVE-2020-21726)
2021-11-24 00:00:00