CVE-2020-21400

CVE-2020-21400 concerns a SQL injection in the PHPMyWind 5.6 web app by gaozhifeng . The vulnerability affects the modify function where an attacker can manipulate the id variable to execute arbitrary code on the server. This is documented across multiple connected sources as a remote, network-ex...

CVE-2020-21400

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function...

CVE-2022-21400

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications component: Mediation Engine. Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2022-21400

CVE-2022-21400 affects Oracle Communications Operations Monitor (component: Mediation Engine). Affected versions: 3.4, 4.2, 4.3, 4.4, 5.0. Exploitation requires network access via HTTP with low privileges and user interaction; successful attacks may lead to unauthorized update/insert/delete and r...

CVE-2022-21400

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications component: Mediation Engine. Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2021-21400

wire-webapp is an open-source front end for Wire, a secure collaboration platform. In wire-webapp before version 2021-03-15-production.0, when being prompted to enter the app-lock passphrase, the typed passphrase will be sent into the most recently used chat when the user does not actively give...

CVE-2021-21400 Entering code in App Lock modal sends input to conversation

wire-webapp is an open-source front end for Wire, a secure collaboration platform. In wire-webapp before version 2021-03-15-production.0, when being prompted to enter the app-lock passphrase, the typed passphrase will be sent into the most recently used chat when the user does not actively give...

CVE-2021-21400

The CVE-2021-21400 issue affects wire-webapp (open-source front end for Wire) prior to 2021-03-15-production.0. The vulnerability arises because, when prompted for the app-lock passphrase, the input is sent to the most recently used chat if the input field does not have focus; input focus is enfo...