SQL Injection Vulnerability in FlarumChina Frontend

FlarumChina is an open source Chinese version of Flarum forum software. A SQL injection vulnerability exists in FlarumChina version v0.1.0-beta.7C. A remote attacker can exploit this vulnerability by sending a request to execute SQL commands...

CVE-2019-9566

FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= request...

CVE-2019-9566

FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= request...

CVE-2019-9566

CVE-2019-9566 pertains to FlarumChina v0.1.0-beta.7C, where a SQL injection flaw exists in the frontend. According to CNVD-2019-06346, a remote attacker can exploit this vulnerability by sending a crafted request (to /?q=) to execute SQL commands. ENISA EUVD and other feeds reference the same vul...