CVE-2020-10512: HGiga C&Cmail - SQL Injection

Published Apr 15, 2020

Updated

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands.

Affected Software

1 affected component

Hgiga Oaklouds Ccm\@il

Remediation

Information

Contact HGiga Inc. for updated version.

Event History

Apr 15, 2020

CVE Published

via MITRE·06:20 AM

Data Sourced

via MITRE·06:20 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-10512?

CVE-2020-10512 is classified as a high severity vulnerability due to its potential for SQL Injection attacks.

How do I fix CVE-2020-10512?

To fix CVE-2020-10512, update the affected versions of HGiga C&Cmail CCMAILQ and CCMAILN to the latest patched releases.

What types of attacks can CVE-2020-10512 enable?

CVE-2020-10512 can enable attackers to execute unauthorized SQL commands through the URL parameter.

What software is affected by CVE-2020-10512?

CVE-2020-10512 affects HGiga Oaklouds Ccm@il versions before olln-calendar-6.0-100.i386.rpm and 5.0-100.i386.rpm.

Who is the vendor for CVE-2020-10512?

The vendor for CVE-2020-10512 is HGiga, which has released updates to mitigate the vulnerability.