CVE-2020-27226

An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

• CWE-89
• CWE-89

• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1202Exploit, Technical Description, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1202Exploit, Technical Description, Third Party Advisory

Published

May 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27220The Eclipse Hono AMQP and MQTT protocol adapters do not chec…8.8
• CVE-2020-27221In Eclipse OpenJ9 up to and including version 0.23, there is…9.8
• CVE-2020-27222In Eclipse Californium version 2.3.0 to 2.6.0, the certifica…7.5
• CVE-2020-27223In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclus…5.3
• CVE-2020-27224In Eclipse Theia versions up to and including 1.2.0, the Mar…9.6
• CVE-2020-27225In versions 4.18 and earlier of the Eclipse Platform, the He…7.8
• CVE-2020-27227An exploitable unatuhenticated command injection exists in t…9.8
• CVE-2020-27228An incorrect default permissions vulnerability exists in the…7.8
• CVE-2020-27229A number of exploitable SQL injection vulnerabilities exists…8.8
• CVE-2020-2723Vulnerability in the Oracle FLEXCUBE Investor Servicing prod…7.1
• CVE-2020-27230A number of exploitable SQL injection vulnerabilities exists…8.8
• CVE-2020-27231A number of exploitable SQL injection vulnerabilities exists…8.8