← All advisories

Critical severity9.8NVD Advisory· Published Mar 18, 2020· Updated Jun 17, 2026

CVE-2020-3922

CVE-2020-3922

Description

LisoMail, by ArmorX, allows SQL Injections, attackers can access the database without authentication via a URL parameter manipulation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Armurox/Lisomail3 versions
cpe:2.3:a:armorx:lisomail:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:armorx:lisomail:*:*:*:*:*:*:*:*range: <=2.0
- (no CPE)
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

3

gist.github.com/tonykuo76/50350af9b77eb51f5ab55964a35f47f2nvdThird Party Advisory
www.chtsecurity.com/news/2fd99e6e-819f-42b4-a7fe-6bc7eeae155cnvdThird Party Advisory
www.twcert.org.tw/tw/cp-132-3437-17241-1.htmlnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.