CVE-2019-16997: SQL Injection
Published Sep 30, 2019
·Updated
In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/languagegeneral.class.php via the admin/?n=language&c=languagegeneral&a=doExportPack appno parameter.
Affected Software
1 affected component
Metinfo Metinfo=7.0.0-beta
Event History
Sep 30, 2019
CVE Published
via MITRE·12:44 PM
Data Sourced
via MITRE·12:44 PM
Description
Frequently Asked Questions
1
What is CVE-2019-16997?
CVE-2019-16997 is a SQL Injection vulnerability discovered in Metinfo 7.0.0beta.
2
How severe is CVE-2019-16997?
CVE-2019-16997 has a severity score of 7.2, which is classified as high.
3
How can I fix CVE-2019-16997?
To fix CVE-2019-16997, you should update to a version of Metinfo that is not affected by this vulnerability.
4
What software versions are affected by CVE-2019-16997?
Metinfo 7.0.0beta is affected by CVE-2019-16997.
5
Is there any reference link available for more information about CVE-2019-16997?
Yes, you can find more information about CVE-2019-16997 at the following link: [https://github.com/XiaOkuoAi/XiaOkuoAi.github.io/issues/2](https://github.com/XiaOkuoAi/XiaOkuoAi.github.io/issues/2)