PT-2020-20403
CVE-2020-8967
·
تاريخ النشر
2020-06-01
·
تاريخ التحديث
2020-06-04
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
GESIO ERP versions prior to 11.2
Description
The issue is related to an improper Neutralization of Special Elements used in an SQL Command, also known as SQL Injection, in the php files of GESIO ERP. This allows malicious users to retrieve all database information.
Recommendations
For versions prior to 11.2, update to version 11.2 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾