CVE-2020-28115

—

CVSS 3.1

8.8 high

EPSS

<1%p59

Published

Nov 5, 2020 (Nov 5, 2020)

Modified

Jun 17, 2026

Description

SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the object_path parameter.

Vendors: web-audimex
Products: audimexee
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.