Lucene search
PRIOn knowledge basePRION:CVE-2020-13526HistoryDec 10, 2020 - 11:15 p.m.
Sql injection
2020-12-1023:15:00
PRIOn knowledge base
www.prio-n.com
4
SQL injection vulnerability exists in the handling of sort parameters in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. The reportTables_Ajax and clientSetupAjax pages are vulnerable to SQL injection in the sort parameter.An attacker can make an authenticated HTTP request to trigger these vulnerabilities.
| CPE | Name | Operator | Version |
|---|---|---|---|
| processmaker | eq | 3.4.11 |
Related
cve
cve
CVE-2020-13526
2020-12-10 23:15:11
osv
osv
BIT-processmaker-2020-13526
2023-11-06 09:00:00
cvelist
cvelist
CVE-2020-13526
2020-12-10 21:15:32
nvd
nvd
CVE-2020-13526
2020-12-10 23:15:11
talos
talos
ProcessMaker sort parameter multiple SQL Injection Vulnerabilities
2020-11-17 00:00:00