CVE-2020-37243 | Supsystic Pricing Table 1.8.6/1.8.7 GET Parameter getListForTbl sidx sql injection (Exploit 49533)

A vulnerability marked as critical has been reported in Supsystic Pricing Table 1.8.6/1.8.7. Affected by this vulnerability is the function getListForTbl of the component GET Parameter Handler. This manipulation of the argument sidx causes sql injection.

This vulnerability is registered as CVE-2020-37243. Remote exploitation of the attack is possible. Furthermore, an exploit is available.