critical9.8
CVE-2020-24600
Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request.
Impact
Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Capexweb Project | Capexweb | Version 1.1 |