CVE-2020-21131: SQL Injection
Published Jul 12, 2021
·Updated
SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=languageweb&a=doAddLanguage.
Affected Software
1 affected component
Metinfo Metinfo=7.0.0-beta
Event History
Jul 12, 2021
CVE Published
via MITRE·12:45 PM
Data Sourced
via MITRE·12:45 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-21131?
The severity of CVE-2020-21131 is high with a score of 7.2.
2
How does the SQL Injection vulnerability in MetInfo 7.0.0beta occur?
The SQL Injection vulnerability in MetInfo 7.0.0beta occurs through the 'admin/?n=language&c=language_web&a=doAddLanguage' endpoint.
3
What software is affected by CVE-2020-21131?
MetInfo 7.0.0beta is affected by CVE-2020-21131.
4
How can I fix the SQL Injection vulnerability in MetInfo 7.0.0beta?
To fix the SQL Injection vulnerability in MetInfo 7.0.0beta, it is recommended to update to a version that has the issue patched.
5
What is the Common Weakness Enumeration (CWE) identifier for CVE-2020-21131?
The Common Weakness Enumeration (CWE) identifier for CVE-2020-21131 is CWE-89.