CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 5.5
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: cpanel before 11.54.0.4 allows sql injection in bin/horde_update_usernames (sec-71).
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2019-08-01
Last Modified Date: 2019-08-13