CVE-2020-21176

creationtimestamp| type| source ---|---|--- 2021-02-01 21:25:15+00:00| seen| https://t.me/cibsecurity/22916...

CVE-2020-21176

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter...

CVE-2020-21176

CVE-2020-21176 describes an SQL injection in ThinkJS 3.2.10. The affected components are the functions model.increment and model.decrement, where user-supplied input via the step parameter can be used to craft and execute arbitrary SQL commands on the backend. The vulnerability enables unauthenti...

Arbitrary Code Injection Over HTTP Traffic (CVE-2020-21176; CVE-2020-25042; CVE-2020-26248; CVE-2020-26712; CVE-2020-28994; CVE-2020-29284; CVE-2020-6308; CVE-2021-25912)

Arbitrary Code Injections Over HTTP Traffic...