EXPOSURES › CVE-2020-24193
CVE-2020-24193
CRITICAL
DETAIL
SourceNVD · cve
Published2020-09-03
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2020-24193 ↗
⚡ RCE
SHAME 50/100
rce
A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
PLAYERS IMPLICATED
DESCRIPTION
A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.80
CVE-2020-24193 represents a critical SQL injection vulnerability in Sourcecodetester Daily Tracker System 1.0, allowing unauthenticated users to bypass authentication via the email parameter. The vuln
Critical vulnerability disclosed
"A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter."
Critical vulnerability disclosed
"HACKMAGEDDON tracks CVE-2020-24193 as part of global cyber attacks."
Neutral listing
"CVE 2020-24193 is listed among vulnerabilities in the database."
Neutral listing
"CVE Watchtower tracks vulnerabilities including CVE-2020-24193."
Neutral listing
"Daily CyberSecurity tracks CVEs including CVE-2020-24193."
Neutral listing
"Berkeley Vulnerability Initiative covers CVE-2020-24193."
Neutral listing
"GitLab Advisory Database includes CVE-2020-24193."
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.