High severity8.8NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-10512

Description

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hgiga/C&Cmail CCMAILQllm-create
Range: <=olln-calendar-6.0-100.i386.rpm
HGiga/C&Cmailv5
Range: CCMAILQ before olln-calendar-6.0-100.i386.rpm
Hgiga/Oaklouds Ccm\@il
cpe:2.3:a:hgiga:oaklouds_ccm\@il:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

gist.github.com/tonykuo76/d52014bbe81995eda499201446aec57anvdThird Party Advisory
www.twcert.org.tw/tw/cp-132-3536-79545-1.htmlnvdThird Party Advisory
www.chtsecurity.com/news/545daf88-adb4-4417-9870-426490c1429envd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000