CVE-2020-24600
CRITICAL WAF: High
CVSS 9.8
Published: 2022-12-26
CWE-89 CWE-89
Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request.
WAF Coverage Analysis
SQL Injection
High WAF Coverage
OWASP: A03:2021 Injection
942xxx - SQL Injection
SQL Injection
High WAF Coverage
OWASP: A03:2021 Injection
942xxx - SQL Injection
Affected Software
| Vendor | Product | Version |
|---|---|---|
| capexweb_project | capexweb | 1.1 |
References
- cybersecurityworks.com (Exploit, Third Party Advisory)