Lucene search

VulDBCVELIST:CVE-2020-36539

HistoryJun 03, 2022 - 7:10 p.m.

CVE-2020-36539 Lógico y Creativo sql injection

2022-06-0319:10:53

CWE-89

VulDB

www.cve.org

cve-2020-36539

lógico y creativo

remote attack

sql injection

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

50.2%

JSON

A vulnerability was found in Lógico y Creativo 1.0 and classified as critical. This issue affects some unknown processing. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely.

CNA Affected

[
  {
    "product": "Lógico y Creativo",
    "vendor": "unspecified",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

References

vuldb.com/?id.159953