high8.8
CVE-2020-28115
SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the object_path…
Impact
SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the object_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Web-Audimex | Audimexee | before 14.1.1 |