Lucene search
MitreCVE-2020-20913HistoryApr 04, 2023 - 3:15 p.m.
CVE-2020-20913
2023-04-0415:15:08
CWE-89
mitre
web.nvd.nist.gov
19
sql injection
ming-soft mcms
cve-2020-20913
nvd
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
54.9%
SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter.
Affected configurations
Node
mingsoftmcmsMatch4.7.2
References
Related
nvd
nvd
CVE-2020-20913
2023-04-04 15:15:08
veracode
veracode
SQL Injection
2023-04-27 08:45:44
cvelist
cvelist
CVE-2020-20913
2023-04-04 00:00:00
prion
prion
Sql injection
2023-04-04 15:15:00
osv
osv
Ming-Soft MCMS vulnerable to SQL injection
2023-04-04 15:30:27
github
github
Ming-Soft MCMS vulnerable to SQL injection
2023-04-04 15:30:27
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
54.9%
Related for CVE-2020-20913