VYPR
← All advisories
High severity7.2NVD Advisory· Published Jul 10, 2020· Updated Jun 17, 2026

CVE-2020-6114

CVE-2020-6114

Description

An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS (Commit bb274de1751ffb9d09482fd2538f9950a94c510a) . A specially crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Glacies/IceHRMcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: = v26.6.0.OS (Commit bb274de1751ffb9d09482fd2538f9950a94c510a)
  • IceHrm/icehrm
    cpe:2.3:a:icehrm:icehrm:26.6.0.os:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.