Back to CVE Browser

CVE-2020-10512

HIGH

8.8

CVSS Severity Score

EPSS Score0.1060%

EPSS Percentile24.25th

PublishedApr 15, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands.

Affected Platforms (CPE)

📦

Hgiga

Oaklouds Ccm\@il

All versions

References & Advisories

🔗 https://gist.github.com/tonykuo76/d52014bbe81995eda499201446aec57a

🔗 https://www.chtsecurity.com/news/545daf88-adb4-4417-9870-426490c1429e

🔗 https://www.twcert.org.tw/tw/cp-132-3536-79545-1.html

🔗 https://gist.github.com/tonykuo76/d52014bbe81995eda499201446aec57a

🔗 https://www.chtsecurity.com/news/545daf88-adb4-4417-9870-426490c1429e

🔗 https://www.twcert.org.tw/tw/cp-132-3536-79545-1.html

Related Vulnerabilities

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...

CVE-2026-487237.8

The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36...