Bioscripts: >> Minitwitter Security Vulnerabilities
Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via the (1) user parameter to (a) index.php and (b) rss.php.
CVSS Score
6.0
EPSS Score
0.003
Published
2009-07-22
index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action.
CVSS Score
6.5
EPSS Score
0.014
Published
2009-07-22