EUVD-2020-17706

Malware in sbrugna...

CVE-2020-25005

Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code...

CVE-2020-25006

Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code...

CVE-2020-25004

Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code...

SQL Injection Vulnerability in Heybbs 1.2 sa***.php File

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs 1.2 sa.php file, which can be exploited by attackers to obtain sensitive database information...