SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. This is a problem in Zope...
8.8CVSS3.8AI score0.01215EPSS
SaveExploits0References3
NVD•added 2020/02/04 5:15 a.m.•14 views
CVE-2020-3937
SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database...