CVE-2019-13969: SQL Injection
Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=uiset&m=admin&c=index&a=dogettextcontent&table=lang&field=1 request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-13969?
CVE-2019-13969 is a vulnerability in Metinfo 6.x that allows SQL injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c=index&a=doget_text_content&table=lang&field=1 request.
How severe is CVE-2019-13969?
CVE-2019-13969 has a severity rating of 8.8 (high).
How does CVE-2019-13969 affect Metinfo?
CVE-2019-13969 affects Metinfo versions between 6.0.0 and 6.2.0.
How can I fix CVE-2019-13969?
To fix CVE-2019-13969, update Metinfo to a version above 6.2.0.
Where can I find more information about CVE-2019-13969?
More information about CVE-2019-13969 can be found at this link: [https://github.com/zhuxianjin/vuln_repo/blob/master/Metinfo%206.x%20Background%20SQL%20injection.md](https://github.com/zhuxianjin/vuln_repo/blob/master/Metinfo%206.x%20Background%20SQL%20injection.md)