CVE-2020-12766

Published May 9th, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter.

BrunoBulle/GNUTeca_3.8-SQL_Inj

Gnuteca v.3.8 is vulnerable to SQL Injection attacks

GitHub