GCVE - cpe:2.3:a:softwareupdate_project:softwareupdate:*:*:*:*:*:munkireport:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:softwareupdate_project:softwareupdate:*:*:*:*:*:munkireport:*:*

part: a version: * update: *

Vendor	Softwareupdate Project (`1f152716-1540-5097-9667-26b3445f80cd`)
Product	Softwareupdate (`9aaf2ce0-e569-5d3e-9441-bef0ca3dba4e`)
Edition	*
Language	*
Software edition	*
Target software	munkireport
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-15887`	vulnerable	2026-06-08 05:19:27.094287	Details available A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/get_tab_data/ endpoint. Published: 2020-07-23T13:36:34.000Z Updated: 2024-08-04T13:30:22.984Z Open on db.gcve.eu Reference links https://github.com/munkireport/munkireport-php/releases https://github.com/munkireport/softwareupdate/releases https://github.com/munkireport/munkireport-php/wiki/20200722-SQL-Injection-in-softwareupdate-module https://github.com/munkireport/munkireport-php/releases/tag/v5.6.3	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.