Sql injection

2019-07-2516:15:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.5%

JSON

OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php.

CPENameOperatorVersion
opensnseq6.1.0

CPE	Name	Operator	Version
	opensns	eq	6.1.0

References

github.com/kikulo/DebugOpen/blob/master/OpenSNSv6.1.0/main.md