Read the docs

Phpgacl Project

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Phpgacl Project records in CISA KEV

No Phpgacl Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phpgacl 7 records HIGH

Records

7 records

TI-2020-10645 CVE-2020-13567 · GHSA-g82r-h8rh-vpp3

SQL injection in OpenEMR

Priority HIGH 76

Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02345 Published 2022-04-18 No fix listed CWE-89
TI-2020-10640 CVE-2020-13562 · GHSA-2cwm-q4rq-7594

Cross-site scripting in phpGACL

Priority HIGH 67

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.77745 Published 2021-02-01 No fix listed CWE-80
TI-2020-10642 CVE-2020-13564 · GHSA-vqp5-86j6-8f36

Cross-site scripting in phpGACL

Priority HIGH 66

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.75856 Published 2021-02-01 No fix listed CWE-80
TI-2020-10641 CVE-2020-13563 · GHSA-rvw7-mwvr-mmjr

Cross-site scripting in phpGACL

Priority HIGH 66

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.75856 Published 2021-02-01 No fix listed CWE-80
TI-2020-10646 CVE-2020-13568 · GHSA-2hf9-4h2w-jqc5

SQL injection in phpGACL

Priority MEDIUM 61

SQL injection vulnerability exists in phpGACL 3.3.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.29683 Published 2021-04-13 No fix listed CWE-89
TI-2020-10644 CVE-2020-13566 · GHSA-856m-qvrj-mfjh

SQL injection in phpGACL

Priority MEDIUM 41

SQL injection vulnerabilities exist in phpGACL 3.3.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01576 Published 2021-04-13 No fix listed CWE-89
TI-2020-10643 CVE-2020-13565 · GHSA-ccp4-42w5-9q8g

Open redirect in phpGACL

Priority LOW 31

An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and OpenEMR development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01902 Published 2021-02-10 No fix listed CWE-601
Open these records in search →