CVE-2020-8967 in ERPinfo

Zusammenfassung

von MITRE

There is an improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in php files of GESIO ERP. GESIO ERP all versions prior to 11.2 allows malicious users to retrieve all database information.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

13.02.2020

Moderieren

akzeptiert

Eintrag

VDB-155929

CPE

bereit

EPSS

0.01034

KEV

nein

Aktivitäten

very low

Sektor

Pharma, Agriculture, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-8967
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-8967
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-8967/

◂ ZurückÜbersichtWeiter ▸

Do you need the next level of professionalism?

Upgrade your account now!