Lucene search

K
osvGoogleOSV:CVE-2020-13568
HistoryApr 13, 2021 - 3:15 p.m.

CVE-2020-13568

2021-04-1315:15:12
Google
osv.dev
4
cve-2020-13568
sql injection
phpgacl 3.3.7
security vulnerability
admin/edit_group.php
http request
post parameter

AI Score

7.9

Confidence

Low

EPSS

0.002

Percentile

52.9%

SQL injection vulnerability exists in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability in admin/edit_group.php, when the POST parameter action is “Submit”, the POST parameter parent_id leads to a SQL injection.

AI Score

7.9

Confidence

Low

EPSS

0.002

Percentile

52.9%

Related for OSV:CVE-2020-13568