CVE-2020-25004

CVE-2020-25004 affects Heybbs v1.2. The vulnerability is a SQL injection in the user.php file via the ID parameter that may allow a remote attacker to execute arbitrary code. According to the connected documents, exploitation details are not provided in these sources, and CVSS metrics from NVD in...

CVE-2020-25006

The CVE-2020-25006 entry concerns Heybbs v1.2, with a SQL injection vulnerability in login.php via the username parameter that may allow a remote attacker to execute arbitrary code. The affected component is the login logic in Heybbs 1.2; underlying cause is a SQL injection flaw in user authentic...

CVE-2020-25005

CVE-2020-25005 affects Heybbs v1.2 with a SQL injection in msg.php via the ID parameter, potentially enabling a remote attacker to execute arbitrary code. This vulnerability has been reported across multiple sources (NVD/Red Hat/CVE listing). The connected documents provide the same description b...