OpenSNS

CVEs (3)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-21726	OpenSNS OpenSNS	Cri	0.64	9.8	0.01	Oct 7, 2021	OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter.
CVE-2020-21725	OpenSNS OpenSNS	Cri	0.64	9.8	0.01	Oct 7, 2021	OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter.
CVE-2019-14266	OpenSNS OpenSNS	Hig	0.57	8.8	0.01	Jul 25, 2019	OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php.

CVE-2020-21726CriOct 7, 2021
OpenSNS
OpenSNS
risk 0.64cvss 9.8epss 0.01
OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter.
CVE-2020-21725CriOct 7, 2021
OpenSNS
OpenSNS
risk 0.64cvss 9.8epss 0.01
OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter.
CVE-2019-14266HigJul 25, 2019
OpenSNS
OpenSNS
risk 0.57cvss 8.8epss 0.01
OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php.