Medium severity6.5NVD Advisory· Published Mar 18, 2020· Updated Jun 17, 2026
CVE-2020-10365
CVE-2020-10365
Description
LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of them are not properly sanitized which could allow an authenticated attacker to perform arbitrary queries to the database.
Affected products
3cpe:2.3:a:logicaldoc:logicaldoc:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:logicaldoc:logicaldoc:*:*:*:*:*:*:*:*range: <8.3.3
- (no CPE)range: <8.3.3
- LogicalDoc/LogicalDocdescription
Patches
Vulnerability mechanics
References
1- www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilitiesnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.