Critical severity9.8NVD Advisory· Published Oct 16, 2020· Updated Jun 17, 2026
CVE-2020-26944
CVE-2020-26944
Description
An issue was discovered in Aptean Product Configurator 4.61.0000 on Windows. A Time based SQL injection affects the nameTxt parameter on the main login page (aka cse?cmd=LOGIN). This can be exploited directly, and remotely.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:aptean:product_configurator:4.61.0000:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:aptean:product_configurator:4.61.0000:*:*:*:*:*:*:*
- (no CPE)range: 4.61.0000
- Aptean/Product Configuratordescription
Patches
Vulnerability mechanics
References
2- www.logicallysecure.com/blog/sql-injection-in-aptean/nvdExploitThird Party Advisory
- www.aptean.comnvdVendor Advisory
News mentions
0No linked articles in our index yet.