Lucene search
+L

3 matches found

NVD
NVD
•added 2019/07/25 4:15 p.m.•34 views

CVE-2019-14266

OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php...

8.8CVSS9.2AI score0.01269EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2019/07/25 3:07 p.m.•47 views

CVE-2019-14266

OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php...

9.2AI score0.01269EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/25 12:00 a.m.•7 views

CVE-2019-14266: Improper Neutralization of Special Elements used in an SQL Command

OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php...

8.8CVSS5.8AI score0.01269EPSS
SaveExploits1References2
Rows per page
Query Builder