CVE-2020-15540

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 5, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-155419.8SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.CVE-2020-155429.8SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.CVE-2020-155439.8SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.CVE-2020-15558.8A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). CVE-2020-15567.8An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory. An attacker who successfCVE-2020-155626.1An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS via a crafted HTML e-CVE-2020-155636.5An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HCVE-2020-155646.5An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check CVE-2020-155658.8An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain pCVE-2020-155666.5An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in eventCVE-2020-155677.8An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-CVE-2020-155689.8TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation
CVE-2020-15540: Critical severity, CVSS 9.8 | Vulnix