CNNVD-202602-1855 Information

CNNVD ID

CNNVD-202602-1855

CVE-2020-37192

  • CNNVD Published: 2026-02-11

Description (Chinese)

Top Password MSN Password Recovery是Top Password公司的一个MSN密码恢复工具。 Top Password MSN Password Recovery 1.30版本存在代码问题漏洞,该漏洞源于XML外部实体注入,可能导致读取本地系统文件。

Description (English)

Top Password MSN Password Recovery is a MSN password restoration tool for Top Password. Top Password MSN Password Release 1.30 has a code problem loophole that originates from input from an outside XML entity and may lead to reading local system files.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

Top Password

Published

2026-02-11

Last Modified

2026-02-24

References

https://www.exploit-db.com/exploits/47896 https://www.top-password.com/ https://www.vulncheck.com/advisories/msn-password-recovery-xml-external-entity-injection

Share on: