CVE-2020-36543

CVE-2020-36543 is a critical SQL injection vulnerability in SialWeb CMS, specifically within the /about.php file when handling the 'Id' argument. This flaw allows for remote exploitation, potentially leading to full compromise of the affected system. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, resulting in high impacts to confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation, readily available exploit frameworks (Metasploit, Nuclei), or significant community discussion or media coverage.