OpenSNS SQL Injection (CVE-2020-21725; CVE-2020-21726)

An SQL injection vulnerability exists in OpenSNS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-21726

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter...

CVE-2020-21726

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter...

CVE-2020-21726

OpenSNS v6.1.0 has a blind SQL injection in /Controller/ChinaCityController.class.php via the cid parameter. The vulnerability arises from improper handling of user input in cid, enabling an attacker to retrieve sensitive database information. CVSS data in the sources indicate network access with...