Unscored CVE-2020-28115 EUVD-2020-20602GHSA-p35c-mjh9-4vrv

SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands…

Published Nov 5, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the object_path parameter.

References

https://github.com/piuppi/Proof-of-Concepts/blob/main/AudimexEE/README.md