CVE-2020-24841

CriticalCVSS 9.8

Published: 16/02/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.63%

73th percentile - higher than 73% of all known CVEs

Summary

SQL injection vulnerability in PNPSCADA 2.200816204020 exists in the 'interf' parameter in /browse.jsp. It allows an attacker to inject malicious SQL code.

Risk Assessment

An attacker can gain unauthorized access to the database, modify or steal data, and exploit other system vulnerabilities.

Recommendation

Immediately update PNPSCADA to the latest version and implement parameterized SQL queries or input validation for the 'interf' parameter.

Original NVD description (English source)

PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.