Vulnerabilities > Phpgacl Project

DATE CVE VULNERABILITY TITLE RISK
2022-04-18 CVE-2020-13567 SQL Injection vulnerability in multiple products
Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7.
network
low complexity
open-emr phpgacl-project CWE-89
critical
9.8
2021-04-13 CVE-2020-13568 SQL Injection vulnerability in multiple products
SQL injection vulnerability exists in phpGACL 3.3.7.
network
low complexity
open-emr phpgacl-project CWE-89
8.8
2021-04-13 CVE-2020-13566 SQL Injection vulnerability in multiple products
SQL injection vulnerabilities exist in phpGACL 3.3.7.
network
low complexity
open-emr phpgacl-project CWE-89
8.8
2021-02-10 CVE-2020-13565 Open Redirect vulnerability in multiple products
An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and OpenEMR development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce).
network
low complexity
open-emr phpgacl-project CWE-601
6.1
2021-02-01 CVE-2020-13564 Cross-site Scripting vulnerability in multiple products
A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.
network
low complexity
phpgacl-project open-emr CWE-79
6.1
2021-02-01 CVE-2020-13563 Cross-site Scripting vulnerability in multiple products
A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.
network
low complexity
phpgacl-project open-emr CWE-79
6.1
2021-02-01 CVE-2020-13562 Cross-site Scripting vulnerability in multiple products
A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.
network
low complexity
phpgacl-project open-emr CWE-79
6.1