← Back to browse · API

CVE-2020-8967

Severity
CRITICAL
CVSS
10.0
EPSS
0.01034
Risk score
40.36
CISA KEV
No
PoC
No
Published
2020-06-01
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2020-29797, GHSA-JX4Q-CG94-9R74
Products
Gesio (GESTIÓN INTEGRAL ONLINE, SL):GESIO ERP 11.2 <11.2
Sources
euvd EUVD-2020-29797

Description

There is an improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in php files of GESIO ERP. GESIO ERP all versions prior to 11.2 allows malicious users to retrieve all database information.

References