Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-14266

OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.0%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
Products affected by CVE-2019-14266
  • Opensns » Opensns » Version: 6.1.0
    cpe:2.3:a:opensns:opensns:6.1.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved