CVE-2020-24600

CVE-2020-24600 affects Shilpi CAPExWeb 1.1. It enables SQL injection via the servlet capexweb.cap_sendMail when a GET parameter is used, with CVSS v3.1 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impacts include confidentiality, integrity, and availability. The vulnerability i...