CVE-2020-15886

2020-07-2314:15:12

Google

osv.dev

8.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.2%

JSON

A SQL injection vulnerability in reportdata_controller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint.

CPENameOperatorVersion
reportdataeq1.4
reportdataeq2.4
reportdataeq2.2
reportdataeq2.5
reportdataeq1.3
reportdataeq1.1
reportdataeq1.5
reportdataeq2.0
reportdataeq2.6
reportdataeq3.4

Name	Operator	Version
reportdata	eq	1.4
reportdata	eq	2.4
reportdata	eq	2.2
reportdata	eq	2.5
reportdata	eq	1.3
reportdata	eq	1.1
reportdata	eq	1.5
reportdata	eq	2.0
reportdata	eq	2.6
reportdata	eq	3.4