Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' parameter in /modules/mail/main/maildetail.php to inject malicious SQL queries and potentially access or modify database contents.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2020-37141 AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' pa… https://www.cve.org/CVERecord?id=CVE-2020-37141
Post summary
The text discloses a SQL injection flaw in AMSS++ 4.31’s maildetail.php script, but does not provide a PoC, exploit, patch, or evidence of active exploitation.
CVE-2020-37141 (CVSS:8.8, HIGH) is Awaiting Analysis. AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' p..https://nvd.nist.gov/vuln/detail/CVE-2020-37141 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post reports a high‑severity SQL injection vulnerability (CVE‑2020‑37141) in AMSS++ 4.31’s mail module, currently awaiting analysis, with no PoC, exploitation, or patch details provided.