The exposure of credentials in the call forwarding configuration module in MeetMe products in versions prior to 2024-09 allows an attacker to gain access to some important assets via configuration files.
Vipshop Saturn Console Vulnerable to SQL Injection via ClusterKey Component