CVE-2017-16896

Critical

Published: 20/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A SQL injection vulnerability exists in the forgotpass component of Tiny Tiny RSS 17.4 in classes/handler/public.php via the login parameter.

An attacker could gain access to sensitive data in the database, potentially leading to serious security breaches.

It is recommended to update to the latest version of Tiny Tiny RSS and implement input data filtering to prevent SQL injections.

Original NVD description (English source)

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter.