CVE-2019-17419: SQL Injection
Published Oct 9, 2019
·Updated
An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=adminuser&a=doGetUserInfo id parameter.
Affected Software
1 affected component
Metinfo Metinfo=7.0.0-beta
Event History
Oct 9, 2019
CVE Published
via MITRE·10:55 PM
Data Sourced
via MITRE·10:55 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-17419?
The severity of CVE-2019-17419 is high with a score of 7.2.
2
How does the SQL injection occur in MetInfo 7.0?
The SQL injection occurs via the admin/?n=user&c=admin_user&a=doGetUserInfo id parameter in MetInfo 7.0.
3
What is the affected software version of CVE-2019-17419?
The affected software version of CVE-2019-17419 is MetInfo 7.0.0-beta.
4
Is there a fix available for CVE-2019-17419?
Yes, the issue has been fixed in later versions of MetInfo.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-17419?
The CWE ID for CVE-2019-17419 is CWE-89.