← All advisories

Critical severity9.8NVD Advisory· Published Dec 26, 2022· Updated Jun 17, 2026

CVE-2020-24600

CVE-2020-24600

Description

Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request.

Affected products

3

Shilpi/CAPExWebdescription
CAPExWeb/CAPExWebllm-create
Range: 1.1
Shilpisoft/Capexwebllm-fuzzy
Range: 1.1

Patches

Vulnerability mechanics

References

1

cybersecurityworks.com/zerodays/cve-2020-24600-sql-injection-in-capexweb.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.