CVE-2020-3922

LisoMail, by ArmorX, allows SQL Injections, attackers can access the database without authentication via a URL parameter manipulation...

Sql injection

LisoMail, by ArmorX, allows SQL Injections, attackers can access the database without authentication via a URL parameter manipulation...

CVE-2020-3922

CVE-2020-3922 affects LisoMail by ArmorX. The vulnerability is an SQL injection via a URL parameter manipulation that allows attackers to access the database without authentication. According to the supplied data, CVSS vectors indicate a NETWORK attack with HIGH/CRITICAL impact (CVSS v3.1: 9.8; c...

CVE-2020-3922 ArmorX LisoMail - SQL Injection

LisoMail, by ArmorX, allows SQL Injections, attackers can access the database without authentication via a URL parameter manipulation...

PT-2020-17798

Name of the Vulnerable Software and Affected Versions LisoMail, by ArmorX affected versions not specified Description The issue allows SQL Injections, enabling attackers to access the database without authentication by manipulating a URL parameter. Recommendations At the moment, there is no...

CVE-2020-3922: Improper Neutralization of Special Elements used in an SQL Command

LisoMail, by ArmorX, allows SQL Injections, attackers can access the database without authentication via a URL parameter manipulation...