EUVD-2020-22921

Malware in sbrugna...

CVE-2020-35243

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb...

CVE-2020-35243

Flamingo (aka FlamingoIM) through 2020-09-29 contains a SQL injection vulnerability in UserManager::updateUserInfoInDb. The CVE is supported by multiple sources (NVD entry and Red Hat PR) showing high/severe impact: CVSSv2 base 7.5 (Partial confidentiality/integrity/availability impact) and CVSSv...

CVE-2020-35243

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb...

PT-2020-17300

Name of the Vulnerable Software and Affected Versions Flamingo aka FlamingoIM through 2020-09-29 Description The issue is related to a SQL injection vulnerability in the UserManager::updateUserInfoInDb function. This allows for potential exploitation by injecting malicious SQL code. Recommendatio...

CVE-2020-35243: Improper Neutralization of Special Elements used in an SQL Command

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb...

Github Flamingo SQL Injection Vulnerability

Github Flamingo is a high-performance, lightweight open source instant messaging software, currently including server-side, pc-side, Android-side, WeChat version and IOS version is currently under development. Flamingo version 2020-09-29 and earlier versions have a SQL injection vulnerability tha...