Vulnerabilities

TI-2020-15275 CVE-2020-25004 · GHSA-fwh4-vq4v-whg6

Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which…

MEDIUM 46

Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02302 Published 2020-09-03 No fix listed CWE-89

TI-2020-15276 CVE-2020-25005 · GHSA-m379-wq6p-7pp9

Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which…

MEDIUM 46

Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02302 Published 2020-09-03 No fix listed CWE-89

TI-2020-15277 CVE-2020-25006 · GHSA-vf6g-jm46-9hpq

Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username…

MEDIUM 46

Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02255 Published 2020-09-03 No fix listed CWE-89

Vulnerabilities

Filters

Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which…

Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which…

Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username…