Skip to content
OpenAdvisories
Unscored CVE-2020-20296 EUVD-2020-13083GHSA-v28p-8jwp-98gh

An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious pa…

Published Feb 1, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute arbitrary SQL commands.

References