CVE-2020-13566

Published: 2021-04-13T15:15Z

Last Modified: 2024-11-21T05:01Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability In admin/edit_group.php, when the POST parameter action is “Delete”, the POST parameter delete_group leads to a SQL injection. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt