VYPR
← All advisories
High severity7.2NVD Advisory· Published Jul 10, 2020· Updated Jun 17, 2026

CVE-2020-6114

CVE-2020-6114

Description

An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS (Commit bb274de1751ffb9d09482fd2538f9950a94c510a) . A specially crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • IceHrm/icehrm
    cpe:2.3:a:icehrm:icehrm:26.6.0.os:*:*:*:*:*:*:*
  • Glacies/IceHRMdescription
  • Glacies/IceHRMllm-create
    Range: = v26.6.0.OS (Commit bb274de1751ffb9d09482fd2538f9950a94c510a)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.