CVE-2020-26546

An issue was discovered in HelpDeskZ 1.0.2

High · published October 12, 2020

CVSS v3.1
7.5
EPSS
1%
Percentile
70.2
In the wild
Unconfirmed
What it is

An issue was discovered in HelpDeskZ 1.0.2. The feature to auto-login a user, via the RememberMe functionality, is prone to SQL injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01300 · 70.2th percentile
Published
2020-10-12T18:59Z
EPSS history
Timeline
  • 12 OCT 18:59Z
    An issue was discovered in HelpDeskZ 1.0.2
    cvelistv5