CVE-2020-21127: SQL Injection
Published Sep 15, 2021
·Updated
MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel.
Affected Software
1 affected component
Metinfo Metinfo=7.0.0
Event History
Sep 15, 2021
CVE Published
via MITRE·04:16 PM
Data Sourced
via MITRE·04:16 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of MetInfo?
The vulnerability ID of MetInfo is CVE-2020-21127.
2
What is the severity of CVE-2020-21127?
The severity of CVE-2020-21127 is critical.
3
How does the SQL injection vulnerability occur in MetInfo 7.0.0?
The SQL injection vulnerability in MetInfo 7.0.0 occurs via the admin/?n=logs&c=index&a=dodel endpoint.
4
How can I fix the SQL injection vulnerability in MetInfo 7.0.0?
To fix the SQL injection vulnerability in MetInfo 7.0.0, apply the latest patches or updates provided by the MetInfo project.
5
Where can I find more information about CVE-2020-21127?
More information about CVE-2020-21127 can be found at the following reference: https://github.com/T3qui1a/metinfo_sqlinjection/issues/1