CVE-2020-36539 MEDIUM

CVE-2020-36539: Lógico y Creativo sql injection

Vendor Unspecified

Product Lógico y Creativo

Weakness CWE-89 · SQLi

Published June 3, 2022

Last update April 15, 2025

View on NVD All CVEs

CVSS base score

6.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability was found in Lógico y Creativo 1.0 and classified as critical. This issue affects some unknown processing. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely.

Key dates

02Disclosure timeline

June 3, 2022 CVE published

April 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-36539 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2025-8471 projectworlds Online Admission System adminlogin.php sql injection CVE-2024-1576 SQL Injection in MegaBIP CVE-2016-20063 Single Personal Message 1.0.3 WordPress Plugin SQL Injection CVE-2025-54474 Extension - dj-extensions.com - SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla CVE-2025-12514 A user with elevated privileges is able to introduce a SQL Injection using the Open-tickets Notification rules configuration parameters