CVE-2020-24193

CriticalCVSS 9.8

Published: 03/09/2020(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.61%

84th percentile - higher than 84% of all known CVEs

Summary

A SQL injection vulnerability in the login mechanism of Sourcecodetester Daily Tracker System 1.0 allows an unauthenticated attacker to bypass authentication by injecting SQL code via the email parameter.

Risk Assessment

An attacker can gain unauthorized access to the system, potentially leading to data theft, data manipulation, or further privilege escalation.

Recommendation

Immediately update the system to the latest version or apply a security patch that filters and parameterizes SQL queries in the login process.

Original NVD description (English source)

A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter.