Skip to content
OpenAdvisories
High · 8.8 CVE-2020-13567 EUVD-2020-5814GHSA-g82r-h8rh-vpp3

Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker ca…

Published Apr 18, 2022 · Updated Apr 15, 2025 · Assigned by talos

Vendor: Open-Emr Vendor: phpGACL Product: openemr Product: phpGACL

Description

Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
OpenEMR OpenEMR 5.0.2, development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce) —
phpGACL phpGACL 3.3.7 —

References