CVE-2020-20340: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...