by Kastro
Paper/Archive/CVE-2020-5624

CVE-2020-5624

Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science XooNIps — SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vec…

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 72.6.726 × 2014.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected

ProductAffectedFixed inSource
XooNIps3.48 and earlier–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refxoonips.osdn.jprefxoonips.osdn.jp/modules/news/index.php?page=article&storyid=12refjvn.jp/en/jp/JVN40725650/index.html