CVE-2020-13526

creationtimestamp| type| source ---|---|--- 2020-12-11 02:34:30+00:00| seen| https://t.me/cibsecurity/19636 2020-12-11 02:37:34+00:00| seen| https://t.me/cibsecurity/19656 2020-12-11 03:25:24+00:00| seen| https://t.me/cibsecurity/19676 2020-12-11 04:25:18+00:00| seen| https://t.me/cibsecurity/196...

CVE-2020-13526

SQL injection vulnerability exists in the handling of sort parameters in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. The reportTablesAjax and clientSetupAjax pages are vulnerable to SQL injection in the sort parameter.An attacker can make an authenticated HTT...