← All advisories

Critical severity9.8NVD Advisory· Published Feb 26, 2020· Updated Jun 17, 2026

CVE-2020-9406

CVE-2020-9406

Description

IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

IBL/Online Weatherdescription
Zigrin/Online Weatherllm-create
Range: <4.3.5a
IBL/Online Weatherllm-fuzzy
Range: <4.3.5a

Patches

Vulnerability mechanics

References

2

github.com/dawid-czarnecki/public-vulnerabilities/tree/master/Online_WeathernvdThird Party Advisory
zigrin.com/advisories/online-weather-command-injection-in-querybcp-method/nvd

News mentions

0

No linked articles in our index yet.