BrunoBulle/GNUTeca_3.8-SQL_Inj

BrunoBulle/GNUTeca_3.8-SQL_Inj

GitHubGitHub
GitHubgithub.com
Releases0
Gnuteca v.3.8 is vulnerable to SQL Injection attacks
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-12766↗
9.8 CRITICAL7.5 HIGH

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter.