CVE-2020-18243 - SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php

MEDIUM

SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php

Published Apr 15, 2025

6.5

MEDIUM

CVSS 3.1

EPSS 0.47%

SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-10170		Advisory
https://github.com/enricozab/CMS/issues/1		Issue TrackingThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 15, 2025

Updated Apr 15, 2025

Reserved Aug 13, 2020

CISA Vulnrichment

Updated Apr 15, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 15, 2025

Updated Apr 15, 2025

GitHub

No data