CVE-2020-5511 in Small CRM

الملخص

بحسب MITRE

PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• حجز: 05/01/2020
• الاعتدال: تمت الموافقة
• إدخال: VDB-148416
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• استغلال: تحميل
• CVSS: 8.8 (NVD)
• EPSS: 0.01740
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Government, Pharma, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-5511
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-5511
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-5511/