CVE-2020-37141
AMSS++ v 4.31 - 'id' SQL Injection
CVSS Score
8.2
EPSS Score
0.0%
EPSS Percentile
0th
AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' parameter in /modules/mail/main/maildetail.php to inject malicious SQL queries and potentially access or modify database contents.
| CWE | CWE-89 |
| Vendor | amss++ |
| Product | amss++ |
| Published | Feb 6, 2026 |
| Last Updated | Apr 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for amss++ amss++
Be the first to know when new high vulnerabilities affecting amss++ amss++ are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
None
Affected Versions
AMSS++ / AMSS++
4.31
References
Credits
indoushka