CVE-2018-1000630

Battelle V2I Hub 2.5.1 is affected by a SQL injection vulnerability. According to CNVD-2019-03266 and NVD records, a remote attacker with authentication can send crafted SQL via the jtSorting or id parameters to /api/PluginStatusActions.php and /status/pluginStatus.php, enabling viewing, adding, ...