What is CVE-2020-36951?

CVE-2020-36951 is a high-severity vulnerability in Geraked Phpscript-Sgh, classified under SQL Injection. CVSS score: 8.2/10. Published 2026-01-27.

How severe is CVE-2020-36951?

High severity. CVSS v3 base score is 8.2 out of 10.

SQL Injection in Geraked Phpscript-Sgh

CVE-2020-36951

Phpscript-sgh 0.1.0 contains a time-based blind SQL injection vulnerability in the admin interface that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit this vulnerability by crafting malicious payloads that trigger time delays, enabling them to extract sensitive database information through conditional sleep techniques.

Vulnerability class: SQL Injection

EPSS: 0.003 (21.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.

Affected products

Geraked Phpscript-sgh — versions 0.1.0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2020-36951?: CVE-2020-36951 is a high-severity vulnerability in Geraked Phpscript-Sgh, classified under SQL Injection. CVSS score: 8.2/10. Published 2026-01-27.
How severe is CVE-2020-36951?: High severity. CVSS v3 base score is 8.2 out of 10.