CVE-2020-36004: Appcms

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information.

Affected products

• Appcms Appcms: version 2.0.101 only

Published 2021-06-03. Last modified 2026-06-17.