CVE-2020-20392

SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...

CVE-2020-20392

CVE-2020-20392 affects the imcat web app (v5.2). The vulnerability is a SQL injection via the fm[auser] parameter in coms/add_coms.php. Public sources describe the issue and its high/critical impact (CVSS v3.1: 9.8; v2: 7.5), but the connected documents do not provide concrete fixes, affected bui...