CVE-2020-26546

Description

An issue was discovered in HelpDeskZ 1.0.2. The feature to auto-login a user, via the RememberMe functionality, is prone to SQL injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

References

https://excellium-services.com/cert-xlm-advisory/CVE-2020-26546/

https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-26546

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS