EUVD-2020-5051

Malware in sbrugna...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

Sql injection

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

CVE-2020-12766

CVE-2020-12766 affects Gnuteca 3.8 and is a SQL Injection in action=main:search:simpleSearch via the exemplaryStatusId parameter. The CVSS3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields base score 9.8 (CRITICAL); CVSS2 base 7.5 (HIGH). Impacts: confidentiality, integrity, and availability...

CVE-2020-12766: Improper Neutralization of Special Elements used in an SQL Command

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

PT-2020-13254

Name of the Vulnerable Software and Affected Versions Gnuteca version 3.8 Description The issue allows SQL Injection via the exemplaryStatusId parameter in the "action=main:search:simpleSearch" endpoint. Recommendations For Gnuteca version 3.8, avoid using the exemplaryStatusId parameter in the...