CVE-2020-13566

🗓️ 13 Apr 2021 14:59:57Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 45 Views🌐 WEB

SQL injection vuln in phpGACL 3.3.7, triggered by specially crafted HTTP request

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2020-13566	7 Jun 202218:49	–	circl
CNNVD	phpGACL SQL注入漏洞	13 Apr 202100:00	–	cnnvd
Cvelist	CVE-2020-13566	13 Apr 202114:59	–	cvelist
EUVD	EUVD-2020-5813	7 Oct 202500:30	–	euvd
NVD	CVE-2020-13566	13 Apr 202115:15	–	nvd
OSV	UBUNTU-CVE-2020-13566	13 Apr 202115:15	–	osv
Prion	Sql injection	13 Apr 202115:15	–	prion
Positive Technologies	PT-2021-9640 · Phpgacl · Phpgacl	30 Jan 202100:00	–	ptsecurity
RedhatCVE	CVE-2020-13566	5 Feb 202513:45	–	redhatcve
Talos	phpGACL database multiple SQL injection vulnerabilities	27 Jan 202100:00	–	talos

NVD

Vulners

Node

open-emr openemrMatch5.0.2

phpgacl_project phpgaclMatch3.3.7

[
  {
    "product": "phpGACL",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "phpGACL 3.3.7"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2020-1179

Parameter	Position	Path	Description	CWE
delete_group	request body	admin/edit_group.php	SQL injection in admin/edit_group.php when action=Delete via delete_group parameter	CWE-89
action	request body	admin/edit_group.php	SQL injection in admin/edit_group.php when action=Delete via delete_group parameter	CWE-89

21 Nov 2024 05:01Current

9.1High risk

Vulners AI Score9.1

CVSS 26.5

CVSS 3.18.8

CVSS 38.8

EPSS0.00063

CWE-89