CVE-2019-14266 | BDVDB-2026-119783 Detail

Description#

OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/kikulo/DebugOpen/blob/master/OpenSNSv6.1.0/main.md

Exploit#

No public exploit known

History#

Version 12019-07-25Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.