CVE-2020-21127: SQL Injection
First published: Wed Sep 15 2021(Updated: )
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Metinfo Metinfo | =7.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of MetInfo?
The vulnerability ID of MetInfo is CVE-2020-21127.
What is the severity of CVE-2020-21127?
The severity of CVE-2020-21127 is critical.
How does the SQL injection vulnerability occur in MetInfo 7.0.0?
The SQL injection vulnerability in MetInfo 7.0.0 occurs via the admin/?n=logs&c=index&a=dodel endpoint.
How can I fix the SQL injection vulnerability in MetInfo 7.0.0?
To fix the SQL injection vulnerability in MetInfo 7.0.0, apply the latest patches or updates provided by the MetInfo project.
Where can I find more information about CVE-2020-21127?
More information about CVE-2020-21127 can be found at the following reference: https://github.com/T3qui1a/metinfo_sqlinjection/issues/1
- collector/nvd-index
- vendor/metinfo
- canonical/metinfo metinfo
- version/metinfo metinfo/7.0.0