AMSS++ AMSS++ vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AMSS++ AMSS++: 1 record(s), with affected versions and fixes.

CVE-2020-37141 High · 8.2 CWE-89 Feb 6, 2026

AMSS++ v 4.31 - 'id' SQL Injection

AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' parameter in /modules/mail/main/maildetail.php to inject malicious SQL queries and potentially access or modify database contents.