CVE-2020-20800: SQL Injection
Published Sep 29, 2020
·Updated
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.
Affected Software
1 affected component
Metinfo Metinfo=7.0.0-beta
Event History
Sep 29, 2020
CVE Published
via MITRE·03:29 PM
Data Sourced
via MITRE·03:29 PM
Description
Frequently Asked Questions
1
What is CVE-2020-20800?
CVE-2020-20800 is a vulnerability discovered in MetInfo v7.0.0 beta that allows SQL Injection.
2
What is the severity of CVE-2020-20800?
CVE-2020-20800 has a severity rating of 9.8 (Critical).
3
How does CVE-2020-20800 affect MetInfo?
CVE-2020-20800 affects MetInfo v7.0.0 beta, allowing SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.
4
What version of MetInfo is affected by CVE-2020-20800?
MetInfo v7.0.0 beta (7.0.0-beta) is affected by CVE-2020-20800.
5
How can I fix CVE-2020-20800 in MetInfo?
To fix CVE-2020-20800 in MetInfo, update to a patched version provided by the vendor.