CVE-2020-36648

KRITISCH 9.8CVE-2020-36648 · Published 08/01/2023 · updated 17/06/2026

Kurz gesagt

CVE-2020-36648 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in pouet2.0 (pouet).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.70%, höher als bei 53.3% aller Schwachstellen.
Abhilfe: auf 06-22-2020 oder neuer aktualisieren.

Package	Affected versions	Patched versions
pouet2.0 pouet	`< 06-22-2020`	`06-22-2020`

Description

A vulnerability, which was classified as critical, was found in pouetnet pouet 2.0. This affects an unknown part. The manipulation of the argument howmany leads to sql injection. The identifier of the patch is 11d615931352066fb2f6dcb07428277c2cd99baf. It is recommended to apply a patch to fix this issue. The identifier VDB-217641 was assigned to this vulnerability.

References

pouetnet/pouet2.0 commit 11d6159 · Patch
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free