CVE-2020-10218

2020-03-1316:22:13

mitre

www.cve.org

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

JSON

A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function.

References

github.com/sapplica/sentrifugo/commits/master

www.exploit-db.com/exploits/48179