CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable. It involves a SQL injection risk.
CVE
CVE-2020-18020
Severity
CRITICAL
CVSS
9.8
EPSS
3.79%
Original NVD Description
SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "user_phone" parameter of a crafted HTTP request to the "admin.php" component.
Related CVEs
Other vulnerabilities affecting the same vendor(s)