Advisories · Technology

phpGACL.

Every CVE that names phpGACL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-13567 CVE record

CVSS 8.8 High

SQL injection in OpenEMR and others
- OpenEMR
- phpGACL
- SQL injection
Not analysed yet 18 Apr 2022
CVE-2020-13568 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

SQL injection in phpGACL
- phpGACL
- SQL injection
Not analysed yet 13 Apr 2021
CVE-2020-13566 CVE record

CVSS 8.8 High

SQL injection in phpGACL
- phpGACL
- SQL injection
Not analysed yet 13 Apr 2021
CVE-2020-13565 CVE record

CVSS 6.1 Medium

Open redirect in phpGACL
- phpGACL
- Open redirect
Not analysed yet 10 Feb 2021
CVE-2020-13564 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cross-site scripting in phpGACL
- phpGACL
- Cross-site scripting (XSS)
Not analysed yet 1 Feb 2021
CVE-2020-13563 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cross-site scripting in phpGACL
- phpGACL
- Cross-site scripting (XSS)
Not analysed yet 1 Feb 2021
CVE-2020-13562 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cross-site scripting in phpGACL
- phpGACL
- Cross-site scripting (XSS)
Not analysed yet 1 Feb 2021