CVE-2020-3937 in Syuan-Gu-Da-Shih

Tóm tắt

Bởi MITRE

SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• chịu trách nhiệm: TWCERT/CC
• Đặt trước: 20/12/2019
• Kiểm duyệt: được chấp nhận
• mục: VDB-149629
• CPE: sẵn sàng
• CWE: CWE-89 (Đã xác nhận)
• CVSS: 7.5 (NVD)
• EPSS: 0.01375
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-3937
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-3937
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-3937/