CVE-2020-8967 GESIO SQL injection vulnerability

There is an improper Neutralization of Special Elements used in an SQL Command SQL Injection vulnerability in php files of GESIO ERP. GESIO ERP all versions prior to 11.2 allows malicious users to retrieve all database information...

CVE-2020-8967

CVE-2020-8967 | GESIO ERP SQL injection : The vulnerability is in PHP files of GESIO ERP, with an improper Neutralization of Special Elements used in SQL commands. All versions prior to 11.2 are affected and allow a malicious user to retrieve database information. Evidence from multiple sources c...