https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:04:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03293 bdu:2020-03293 https://cve.radiocsirt.org/vuln/bdu:2020-03293 https://cve.radiocsirt.org/vuln/euvd-2026-177270 EUVD-2026-177270 https://cve.radiocsirt.org/vuln/euvd-2026-177270 https://cve.radiocsirt.org/vuln/fkie_cve-2018-4056 <p>An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.</p> <p>An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-4056 https://cve.radiocsirt.org/vuln/ghsa-c3pf-948r-8592 <p>An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.</p> <p>An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-c3pf-948r-8592 https://cve.radiocsirt.org/vuln/gsd-2018-4056 gsd-2018-4056 https://cve.radiocsirt.org/vuln/gsd-2018-4056 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-4056 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: coturn, Ubuntu:18.04:LTS: coturn</p> <p>An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: coturn, Ubuntu:18.04:LTS: coturn</p> <p>An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-4056