← CVE Intelligence

CVE-2020-13567

OpenEMR / OpenEMR PUBLISHED

Description (CNA)

Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
OpenEMR / OpenEMRaffected 5.0.2; affected development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce)
phpGACL / phpGACLaffected 3.3.7

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.