PT-2020-20403
CVE-2020-8967
·
Published
2020-06-01
·
Updated
2020-06-04
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
GESIO ERP versions prior to 11.2
Description
The issue is related to an improper Neutralization of Special Elements used in an SQL Command, also known as SQL Injection, in the php files of GESIO ERP. This allows malicious users to retrieve all database information.
Recommendations
For versions prior to 11.2, update to version 11.2 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾