CVE-2020-35545: 
Linux Debian vulnerability analysis and mitigation

Time-based SQL injection vulnerability was discovered in Spotweb version 1.4.9, identified as CVE-2020-35545. The vulnerability was disclosed on December 17, 2020, and allows unauthenticated attackers to execute SQL injection attacks via the query string parameter. The vulnerability affects Spotweb project version 1.4.9 (NVD).

The vulnerability is classified as an SQL injection (CWE-89) that allows attackers to execute time-based SQL injection attacks through the query string parameter. The severity is rated as CRITICAL with a CVSS v3.1 Base Score of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The attack vector is network-accessible, requires low attack complexity, and needs no privileges or user interaction (NVD).

Successful exploitation of this vulnerability can result in unauthorized access to the database, potentially leading to data theft, manipulation, or complete compromise of the affected system. The high CVSS score indicates that the vulnerability can affect all three security properties: confidentiality, integrity, and availability (NVD).

The vulnerability is easily exploitable by unauthenticated attackers with network access. An attacker can trigger the vulnerability by sending malicious payloads through the query string, causing time-based SQL injection attacks against the underlying database service (GitHub Issue).