5 matches found
EUVD-2020-29650
Malware in sbrugna...
9.8CVSS9AI score0.02608EPSS
SaveExploits1References5
BIT-SUITECRM-2020-8802
SuiteCRM through 7.11.11 has Incorrect Access Control via actionsaveHTMLField Bean Manipulation...
9.8CVSS9.6AI score0.02608EPSS
SaveExploits1References4
Information disclosure
SuiteCRM through 7.11.11 has Incorrect Access Control via actionsaveHTMLField Bean Manipulation...
7.5CVSS9.4AI score0.02608EPSS
SaveExploits1References3Affected Software1
CVE-2020-8802
SuiteCRM through 7.11.11 has Incorrect Access Control via actionsaveHTMLField Bean Manipulation...
9.6AI score0.02608EPSS
SaveExploits1References3
CVE-2020-8802
Summary (CVE-2020-8802) : SuiteCRM up to version 7.11.11 is affected by an Incorrect Access Control via the HomeController::action_saveHTMLField() bean manipulation, which can create or modify arbitrary beans. This enables potential second-order SQL injection or PHP object injection as described ...
9.8CVSS9.5AI score0.02608EPSS
SaveExploits1References3Affected Software1
20