What is CVE-2016-20063?

CVE-2016-20063 is a high-severity vulnerability in Md. Shamim Shahnewaz Single Personal Message, classified under SQL Injection. CVSS score: 7.1/10. Published 2026-06-09.

How severe is CVE-2016-20063?

High severity. CVSS v3 base score is 7.1 out of 10.

SQL Injection in Md. Shamim Shahnewaz Single Personal Message

CVE-2016-20063

Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries by injecting malicious code through the message parameter. Attackers can access the admin interface and…

Vulnerability class: SQL Injection

EPSS: 0.002 (12.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N.

Affected products

Md. Shamim Shahnewaz Single Personal Message — versions 1.0.3

Weakness classification (CWE)

CWE-89 — SQL Injection

References

disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2016-20063?: CVE-2016-20063 is a high-severity vulnerability in Md. Shamim Shahnewaz Single Personal Message, classified under SQL Injection. CVSS score: 7.1/10. Published 2026-06-09.
How severe is CVE-2016-20063?: High severity. CVSS v3 base score is 7.1 out of 10.