Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request.

Published Dec 26, 2022 · Updated Apr 14, 2025 · Assigned by mitre