Lucene search
China National Vulnerability DatabaseCNVD-2021-101949HistoryDec 12, 2021 - 12:00 a.m.
Belloo SQL Injection Vulnerability
2021-12-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
belloo
sql injection
input validation
sensitive data
database
connect.php
EPSS
0.002
Percentile
58.7%
Belloo, a “high quality” dating software from Belloo, is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the ip parameter of connect.php, and can be exploited to execute illegal SQL commands to steal sensitive data from the database. sensitive data.
Related
cvelist
cvelist
CVE-2021-41695
2021-12-09 15:29:14
nvd
nvd
CVE-2021-41695
2021-12-09 16:15:08
prion
prion
Sql injection
2021-12-09 16:15:00
cve
cve
CVE-2021-41695
2021-12-09 16:15:08