Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Phpgacl Project Clear all filters
TI-2020-10645 CVE-2020-13567 · GHSA-g82r-h8rh-vpp3

SQL injection in OpenEMR

Priority HIGH 76

Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02345 Published 2022-04-18 No fix listed CWE-89
TI-2020-10646 CVE-2020-13568 · GHSA-2hf9-4h2w-jqc5

SQL injection in phpGACL

Priority MEDIUM 61

SQL injection vulnerability exists in phpGACL 3.3.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.29683 Published 2021-04-13 No fix listed CWE-89
TI-2020-10644 CVE-2020-13566 · GHSA-856m-qvrj-mfjh

SQL injection in phpGACL

Priority MEDIUM 41

SQL injection vulnerabilities exist in phpGACL 3.3.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01576 Published 2021-04-13 No fix listed CWE-89
TI-2020-10643 CVE-2020-13565 · GHSA-ccp4-42w5-9q8g

Open redirect in phpGACL

Priority LOW 31

An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and OpenEMR development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01902 Published 2021-02-10 No fix listed CWE-601
TI-2020-10642 CVE-2020-13564 · GHSA-vqp5-86j6-8f36

Cross-site scripting in phpGACL

Priority HIGH 66

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.75856 Published 2021-02-01 No fix listed CWE-80
TI-2020-10641 CVE-2020-13563 · GHSA-rvw7-mwvr-mmjr

Cross-site scripting in phpGACL

Priority HIGH 66

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.75856 Published 2021-02-01 No fix listed CWE-80
TI-2020-10640 CVE-2020-13562 · GHSA-2cwm-q4rq-7594

Cross-site scripting in phpGACL

Priority HIGH 67

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.77745 Published 2021-02-01 No fix listed CWE-80