Critical severity9.8NVD Advisory· Published Oct 16, 2020· Updated Jun 17, 2026

CVE-2020-26944

Description

An issue was discovered in Aptean Product Configurator 4.61.0000 on Windows. A Time based SQL injection affects the nameTxt parameter on the main login page (aka cse?cmd=LOGIN). This can be exploited directly, and remotely.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aptean/Product Configuratordescription
Aptean/Product Configuratorllm-fuzzy
Range: 4.61.0000

Patches

Vulnerability mechanics

References

www.logicallysecure.com/blog/sql-injection-in-aptean/nvdExploitThird Party Advisory
www.aptean.comnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000