3 matches found
CVE-2025-65235
OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 is vulnerable to a SQL injection vulnerability. The flaw exists in the getSubUsersByProvider function due to improper neutralization of special elements in the ID parameter. This vulnerability allows an attacker to interfere with databas...
OpenCode USSD Gateway 安全漏洞
OpenCode USSD Gateway is an OpenCode open source gateway software for processing and managing USSD messages. A security vulnerability exists in OpenCode USSD Gateway version 6.13.11, which stems from an SQL injection in the ID parameter of the getSubUsersByProvider function...
CVE-2025-65238
The OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 is vulnerable to an incorrect access control flaw within the getSubUsersByProvider function. This security weakness allows an attacker with low-level privileges to bypass intended restrictions to dump user records and gain access to ...