system
Describe <CVE-2020-20289>.
user
What is <CVE-2020-20289>?
assistant
Sql injection vulnerability in the yccms 3.3 project. The no_top function's improper judgment of the request parameters, triggers a sql injection vulnerability..