Lucene search

K
cvelistMitreCVELIST:CVE-2020-28870
HistoryFeb 10, 2021 - 12:19 a.m.

CVE-2020-28870

2021-02-1000:19:43
mitre
www.cve.org
2
inoerp
unauthorized access
code execution
server side

AI Score

9.6

Confidence

High

EPSS

0.014

Percentile

86.4%

In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/form_personalization/json_fp.php.

AI Score

9.6

Confidence

High

EPSS

0.014

Percentile

86.4%

Related for CVELIST:CVE-2020-28870