critical9.8
CVE-2020-20296
An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute…
Impact
An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute arbitrary SQL commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cmswing | Cmswing | Version 1.3.8 |