SQL injection vulnerability in SearchController

CVE-2020-26935

Affected version: >=4.9.0,<4.9.6|>=5.0.0,<5.0.3

Reported by:
FriendsOfPHP/security-advisories

XSS relating to the transformation feature

CVE-2020-26934

Affected version: >=4.9.0,<4.9.6|>=5.0.0,<5.0.3

Reported by:
FriendsOfPHP/security-advisories

SQL injection with processing username

CVE-2020-10804

Affected version: >=4.9.0,<4.9.5|>=5.0.0,<5.0.2

Reported by:
FriendsOfPHP/security-advisories

SQL injection relating to data display

CVE-2020-10803

Affected version: >=3.4,<4.9.5|>=5.0.0,<5.0.2

Reported by:
FriendsOfPHP/security-advisories

SQL injection relating to searching

CVE-2020-10802

Affected version: >=4.9.0,<4.9.5|>=5.0.0,<5.0.2

Reported by:
FriendsOfPHP/security-advisories

SQL injection in user accounts page

CVE-2020-5504

Affected version: >=4.0.0,<4.9.4|>=5.0.0,<5.0.1

Reported by:
FriendsOfPHP/security-advisories