CVE-2020-36768

A vulnerability was found in rl-institut NESP2 Initial Release/1.0. It has been classified as critical. Affected is an unknown function of the file app/database.py. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 07c0cdf36cf6a4345086d07b54423723a496af5e. It is recommended to apply a patch to fix this issue. VDB-246642 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/rl-institut/NESP2/commit/07c0cdf36cf6a4345086d07b54423723a496af5ePatch
• https://github.com/rl-institut/NESP2/issues/334Issue Tracking, Patch
• https://github.com/rl-institut/NESP2/pull/333Issue Tracking, Patch
• https://vuldb.com/?ctiid.246642Permissions Required, Third Party Advisory
• https://vuldb.com/?id.246642Permissions Required, Third Party Advisory
• https://github.com/rl-institut/NESP2/commit/07c0cdf36cf6a4345086d07b54423723a496af5ePatch
• https://github.com/rl-institut/NESP2/issues/334Issue Tracking, Patch
• https://github.com/rl-institut/NESP2/pull/333Issue Tracking, Patch
• https://vuldb.com/?ctiid.246642Permissions Required, Third Party Advisory
• https://vuldb.com/?id.246642Permissions Required, Third Party Advisory

Published

Dec 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36761The Top 10 plugin for WordPress is vulnerable to Cross-Site …4.3
• CVE-2020-36762A vulnerability was found in ONS Digital RAS Collection Inst…9.8
• CVE-2020-36763Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allow…5.4
• CVE-2020-36765Insufficient policy enforcement in Navigation in Google Chro…6.5
• CVE-2020-36766An issue was discovered in the Linux kernel before 5.8.6. dr…3.3
• CVE-2020-36767tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows …7.5
• CVE-2020-36769The Widget Settings Importer/Exporter Plugin for WordPress …5.4
• CVE-2020-36770pkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 …9.8
• CVE-2020-36771CloudLinux CageFS 7.1.1-1 or below passes the authentication…7.8
• CVE-2020-36772CloudLinux CageFS 7.0.8-2 or below insufficiently restricts …4.4
• CVE-2020-36773Artifex Ghostscript before 9.53.0 has an out-of-bounds write…9.8
• CVE-2020-36774plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 an…5.5