CVE-2020-36951
Published: 27 January 2026
Summary
CVE-2020-36951 is a high-severity SQL Injection (CWE-89) vulnerability. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 21.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2020-36951 is a time-based blind SQL injection vulnerability (CWE-89) in Phpscript-sgh version 0.1.0. The issue affects the admin interface, where the 'id' parameter enables attackers to manipulate database queries by injecting malicious payloads that trigger conditional time delays, such as sleep functions, to infer sensitive data.
The vulnerability has a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N), indicating high severity with network accessibility, low attack complexity, no required privileges or user interaction, and primary impacts on confidentiality (high) and integrity (low). Remote unauthenticated attackers can exploit it to extract sensitive database information through repeated blind queries that measure response times.
Relevant advisories and resources include the project repository at https://github.com/geraked/phpscript-sgh, a proof-of-concept exploit at https://www.exploit-db.com/exploits/49192, and a detailed advisory from VulnCheck at https://www.vulncheck.com/advisories/phpscript-sgh-time-based-blind-sql-injection. No specific patches or mitigations are detailed in the available information.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2020-30876
Vulnerability details
Phpscript-sgh 0.1.0 contains a time-based blind SQL injection vulnerability in the admin interface that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit this vulnerability by crafting malicious payloads that trigger time delays, enabling them to…
more
extract sensitive database information through conditional sleep techniques.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct unauthenticated remote exploitation of a public-facing web app via SQL injection for data extraction.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents the time-based blind SQL injection by validating the 'id' parameter against expected formats, blocking malicious payloads that trigger conditional delays.
Requires timely identification, reporting, and correction of the specific SQL injection flaw in the admin interface.
Vulnerability scanning identifies the blind SQL injection in the 'id' parameter, enabling remediation before exploitation.