Search vulnerabilities

Results 3

Export CSV
CVE-2020-25006

Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Products
CVE-2020-25005

Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Products
CVE-2020-25004

Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Products