CVE-2020-35327: SQL Injection
Published Mar 4, 2021
·Updated
SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno (POST) parameter to adminclass.php
Affected Software
1 affected component
Courier Management System Project Courier Management System=1.0
Event History
Mar 4, 2021
CVE Published
via MITRE·03:40 PM
Data Sourced
via MITRE·03:40 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-35327?
CVE-2020-35327 is categorized as a high severity vulnerability due to its potential to allow unauthorized access to sensitive information.
2
How do I fix CVE-2020-35327?
To fix CVE-2020-35327, ensure that input validation and parameter sanitization are implemented on the ref_no (POST) parameter in admin_class.php.
3
Which versions of Courier Management System are affected by CVE-2020-35327?
CVE-2020-35327 affects Courier Management System version 1.0.
4
What type of vulnerability is CVE-2020-35327?
CVE-2020-35327 is an SQL injection vulnerability that can be exploited to manipulate database queries.
5
What components of the Courier Management System are impacted by CVE-2020-35327?
CVE-2020-35327 impacts the admin_class.php component, specifically through the use of the ref_no POST parameter.