2 matches found
CVE-2020-15887
A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...
8.8CVSS0.01262EPSS
SaveExploits0References6
CVE-2020-15887: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...
8.8CVSS6.3AI score0.01262EPSS
SaveExploits0References2
20