EUVD-2021-26621

Malware in sbrugna...

Sql injection

SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: this issue exists because of an incomplete fix for CVE-2020-35545...

UBUNTU-CVE-2021-3286

SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: this issue exists because of an incomplete fix for CVE-2020-35545...

CVE-2021-3286

The CVE-2021-3286 entry concerns Spotweb 1.4.9, where SQL injection exists because the notAllowedCommands protection is inadequate, allowing variations of the payload. The issue is linked to an incomplete fix for CVE-2020-35545 and is described across multiple sources (e.g., CNVD/OSV) as a time-b...

Spotweb 1.4.9 - 'search' SQL Injection

Exploit Title: Spotweb 1.4.9 - 'search' SQL Injection Google Dork: N/A Date: 20 December 2020 Exploit Author: BouSalman Vendor Homepage: https://github.com/spotweb/spotweb Software Link: N/A Version: 1.4.9 Tested on: Ubuntu 18.04 CVE: CVE-2020-35545 GET...

Spotweb 1.4.9 SQL Injection

Exploit Title: Spotweb 1.4.9 - 'search' SQL Injection Google Dork: N/A Date: 20 December 2020 Exploit Author: BouSalman Vendor Homepage: https://github.com/spotweb/spotweb Software Link: N/A Version: 1.4.9 Tested on: Ubuntu 18.04 CVE: CVE-2020-35545 GET...

CVE-2020-35545

creationtimestamp| type| source ---|---|--- 2020-12-17 22:42:58+00:00| seen| https://t.me/cibsecurity/21013...

CVE-2020-35545

Time-based SQL injection exists in Spotweb 1.4.9 via the query string...

CVE-2020-35545

Time-based SQL injection exists in Spotweb 1.4.9 via the query string...

CVE-2020-35545

Time-based SQL injection exists in Spotweb 1.4.9 via the query string...

CVE-2020-35545

Removed by vendor...

CVE-2020-35545

CVE-2020-35545 is a time-based SQL injection affecting Spotweb 1.4.9 via the query string. Exploitation is possible remotely over the network with no authentication, and the CVSSv3.1 score is 9.8 (CRITICAL). The provided documents do not include a confirmed patch or remediation guidance; exploita...