CVE-2020-10218

A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function.

Date published : 2020-03-13

https://www.exploit-db.com/exploits/48179

https://github.com/sapplica/sentrifugo/commits/master