Beveiligingsadvies

CVE-2020-37141

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-06 23:14:07
Laatst bijgewerkt 2026-07-28 01:47:13
Toegewezen door VulnCheck
CVSS-score 8.8
Status PUBLISHED

Beschrijving

AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' parameter in /modules/mail/main/maildetail.php to inject malicious SQL queries and potentially access or modify database contents.