Description
An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parameters can execute arbitrary SQL commands.
Unscored
CVE-2020-20295
EUVD-2020-13082GHSA-3gc8-mch5-55gq
An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious param…
Published Feb 1, 2021 · Updated Aug 4, 2024 · Assigned by mitre