4 matches found
OpenSNS SQL Injection (CVE-2020-21725; CVE-2020-21726)
An SQL injection vulnerability exists in OpenSNS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
7.5CVSS9.9AI score0.0128EPSS
SaveExploits2
CVE-2020-21726
OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter...
9.8CVSS0.0128EPSS
SaveExploits1References1
CVE-2020-21726
OpenSNS v6.1.0 has a blind SQL injection in /Controller/ChinaCityController.class.php via the cid parameter. The vulnerability arises from improper handling of user input in cid, enabling an attacker to retrieve sensitive database information. CVSS data in the sources indicate network access with...
9.8CVSS8.2AI score0.0128EPSS
SaveExploits1References1Affected Software1
20