CVE-2020-21725

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter...

OpenSNS SQL Injection (CVE-2020-21725; CVE-2020-21726)

An SQL injection vulnerability exists in OpenSNS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-21725

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter...

CVE-2020-21725

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter. Exploitation could allow an attacker to obtain sensitive database information and potentially impact integrity/availability as described in the CVE records. Root cause i...