Vendors / Opensns Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now Opensns records in CISA KEV No Opensns vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0128 · Published 2021-10-07 · No fix listed CWE-89
Priority MEDIUM 45
OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0128 · Published 2021-10-07 · No fix listed CWE-89
Priority MEDIUM 41
OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01269 · Published 2019-07-25 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
2 1 0 0 0
THREATIST.IORead the docs