by Kastro
Paper/Archive/CVE-2020-20296

CVE-2020-20296

mitre — An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious…

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 71.9.719 × 2014.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute arbitrary SQL commands.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgithub.com/arterli/CmsWing/issues/51