CVE-2020-21133: SQL Injection
Published Jul 12, 2021
·Updated
SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid.
Affected Software
1 affected component
Metinfo Metinfo=7.0.0-beta
Event History
Jul 12, 2021
CVE Published
via MITRE·12:45 PM
Data Sourced
via MITRE·12:45 PM
Description
Frequently Asked Questions
1
What is CVE-2020-21133?
CVE-2020-21133 is a SQL Injection vulnerability discovered in Metinfo 7.0.0 beta in the member/getpassword.php?lang=cn&a=dovalid script.
2
What is the severity of CVE-2020-21133?
CVE-2020-21133 has a severity rating of 9.8, which is considered critical.
3
How can the SQL Injection vulnerability be exploited?
The SQL Injection vulnerability in Metinfo 7.0.0 beta can be exploited by inserting malicious SQL statements in the 'lang' parameter of the member/getpassword.php?lang=cn&a=dovalid script.
4
What is the affected software for CVE-2020-21133?
The affected software is Metinfo 7.0.0 beta.
5
How can I fix the SQL Injection vulnerability in Metinfo 7.0.0 beta?
To fix the SQL Injection vulnerability in Metinfo 7.0.0 beta, it is recommended to update to a patched version or apply the necessary security patches provided by the vendor.