CVE-2020-24600

creationtimestamp| type| source ---|---|--- 2022-12-27 00:41:09+00:00| seen| https://t.me/cibsecurity/55379...

CVE-2020-24600

Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.capsendMail GET request...

CVE-2020-24600

CVE-2020-24600 affects Shilpi CAPExWeb 1.1. It enables SQL injection via the servlet capexweb.cap_sendMail when a GET parameter is used, with CVSS v3.1 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impacts include confidentiality, integrity, and availability. The vulnerability i...