CVE-2020-15924

There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure

published July 24, 2020

CVSS
—
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01881 · 79.3th percentile
Published
2020-07-24T00:58Z
EPSS history
Timeline
  • 24 JUL 00:58Z
    There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure
    cvelistv5