CVE-2020-13567

Опубликовано: 18 апр. 2022

Источник: nvd

CVSS3: 8.8

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.

Ссылки

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1179
Exploit
Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1179
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:open-emr:openemr:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:open-emr:openemr:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:phpgacl_project:phpgacl:3.3.7:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00054

Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-g82r-h8rh-vpp3

CVSS3: 9.8

github

почти 4 года назад

Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.

EPSS

Процентиль: 17%

0.00054

Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89