Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Samast Technologies Magicpin 代码问题漏洞
Vulnerability Description
Samast Technologies Magicpin是印度Samast Technologies公司的一款将消费者方面的 Zomato（餐厅发现和评论）和 Roposo（基于主题的社交媒体网络）和餐厅方面的 Freshdesk（客户管理应用程序）的部分结合在一起的应用程序。 Samast Technologies Magicpin v3.4版本存在安全漏洞。攻击者利用该漏洞通过特制的SVG文件访问敏感数据库信息。
CVSS Information
N/A
Vulnerability Type
N/A